White House Issues Cybersecurity Guidelines for Agencies, Contractors

CISA releases its first strategic plan, Asian victims forced to run cyber scams, China begins mass DNA collection in Tibet, Google and Meta hit with $72 million privacy fines in S. Korea, much more

Don’t miss Metacurity’s special report on Peiter Zatko’s testimony before the Senate Judiciary Committee that we published yesterday.

Photo by Kristina Volgenau on Unsplash

The White House published guidelines for how federal agencies and government contractors must comply with President Biden’s May 2021 cybersecurity executive order that stipulated federal systems and vendors must meet common cybersecurity standards.

In an eight-page memo, the Office of Management and Budget spells out how the NIST Secure Software Development Framework (SSDF), SP 800- 218,3, and the NIST Software Supply Chain Security Guidance4 include a set of practices that create the foundation for developing secure software. The EO further directs the Office of Management and Budget (OMB) to require agencies to comply with these guidelines. (Tim Starks and Aaron Schaffer / Washington Post)

Related: OMB, White House