Industry Regulations

The new regulations would eliminate two of the five levels of maturity and allow self-assessment and affirmation of compliance with federal cybersecurity relations for all but the most sensitive and high priority acquisitions.

The proposed Bureau of Cyberspace and Digital Policy will need to figure out where it fits in on a number of international issues, said Deputy Secretary of State Wendy Sherman.

DevSecOps teams need to lead the way in convincing the industry to adopt a software bill of materials for mobile apps.

Five Republican senators are asking the Transportation Security Administration to hold off imposing new emergency cybersecurity regulations on the rail and aviation industries so they can engage with companies through the normal regulatory process.

The Department of Justice will more aggressively pursue contractors and grantees for misrepresenting their cybersecurity posture to the government. While few doubt there's a real problem to be solved, some in the legal and contracting community have raised questions about whether it could clash with other Justice and Biden administration cybersecurity priorities, and whether a good intentioned initiative could create a chilling effect among companies seeking government opportunities.

Treasury's Office of Foreign Assets Control lays out best practices for the cryptocurrency industry to comply with sanctions meant to curb ransomware.

Although just 14,000 patients were impacted by its 2017 data breach, Diamond Institute must overhaul its cybersecurity program and pay a hefty penalty over serious security flaws found by New Jersey’s acting attorney general.