Cybersecurity News in Review

Robert DuPree
January 23, 2023 • 3 min read

This week’s Cybersecurity News in Review includes reporting on plans by NIST’s to update its Cybersecurity Framework and by the SEC to impose new cybersecurity requirements on the companies it regulations, a new law requiring DoD to assess the cybersecurity of cloud partners who deal with classified data, and the latest on the new federal cybersecurity grant program for state and local governments. There is also coverage of a new survey ranking cybersecurity at the top of global companies’ concerns, a survey on K12 cybersecurity concerns, a GAO report warning that agencies are not following its cybersecurity recommendations, and an inspector general report on cybersecurity concerns with the Pentagon’s Secure Unclassified Network (SUNet). 

NIST looking at revisions to Cybersecurity Framework

Nextgov reports on the Jan. 19 announcement by NIST that it will be updating its Cybersecurity Framework (CSF) and that CSF 2.0 will likely seek more broad-based cybersecurity across various economic sectors, including sector-specific approaches. Read more…

SEC aims to issue new cybersecurity regs this spring

According to Cybersecurity Dive, the Securities and Exchange Commission is looking to impose new cybersecurity requirements on companies by May of this year, possibly including stricter, more detailed rules for swift disclosure of cyber incidents and frequent cyber risk management filings.  Read more…

NDAA requires evaluation of Pentagon cloud partners’ cybersecurity

FCW says a provision in the just-signed FY 2023 National Defense Authorization Act requires DoD to evaluate the cybersecurity of commercial cloud systems that interact with classified data, but there are concerns about the compliance impacts of this provision.  Read more…

State and local governments still working to receive cyber grants

Government Technology looks into how states are making slow but steady progress toward fulfilling the requirements to receive funds from the first year allocation of the State and Local Cybersecurity Grant Program exacted in late 2021, with an opportunity to apply for more awards in late spring of this year.  Read more…

Survey: Cyber risks continue to worry companies worldwide

Cybersecurity Dive cites a new survey that confirms cyber incidents, including ransomware and data breaches, rank at the top of global corporate concerns. Read more…

New report focuses on students as prime K12 cyber attack vector

According to The Journal, a recent survey finds that a quarter of responding K12 school administrators say their districts experienced a cyberattack of some form in the past year, and that two-thirds of teachers said their biggest risk for attack stems from students not practicing safe cyber hygiene. Read more…

GAO: Agencies are failing to follow its cybersecurity recommendations, urges tougher oversight

CyberScoop reports the GAO has concluded that only 40 percent of the cybersecurity recommendations it has made since 2010 have been made by federal departments and agencies, and it says the GAO is urging the Biden Administration’s upcoming national cyber strategy to provide for more effective oversight of agency compliance with its recommendations. Read more…

IG report voices cybersecurity concerns over DoD’s Secure Unclassified Network

Nextgov says a new Pentagon inspector general report says increased funding and other changes are needed to better manage cybersecurity within DoD’s Secure Unclassified Network (SUNet). Read more…

Robert DuPree
Manager of Government Affairs
Robert DuPree is the manager of government affairs at Telos Corporation. Follow him on Twitter: @RFDuPree
Read full bio

Subscribe to Our Newsletter

Although we may use your information for targeted marketing and advertising, as described in the Privacy Policy, we will never sell your information to any third party.