The National Institute of Standards and Technology released Version 1.0.0 of the Open Security Controls Assessment Language (OSCAL), a machine-readable language. The agency has been working with the Federal Risk and Authorization Management Program (FedRAMP) to standardize authorization packages and…

The water industry, like most critical infrastructure sectors, shows a range of cybersecurity preparedness levels, even as threats grow. A June survey conducted by the Water Information Sharing and Analysis Center (Water-ISAC) and the Water Sector Coordinating Council includes responses from…

Today’s leading cyber threat is, unarguably, ransomware. The recent DarkSide ransomware attack on Colonial Pipeline underscored why organizations shouldn’t pay ransoms for stolen data and why they need a solid business continuity and disaster recovery (BCDR) plan. Despite complying with…

The Cybersecurity and Infrastructure Security Agency doesn’t have the data to determine if agencies are segmenting and segregating their networks, according to CISA acting Director Brandon Wales. In a June 3 response to questions from Sen. Ron Wyden (D-Ore.) about…