Bill would set infosec standards

Sen. John Edwards (D-N.C.) introduced a bill Jan. 16 that is designed to better position the federal government to serve as a model in information security.

The Cyber Security Leadership Act (S. 187) would direct the National Institute of Standards and Technology to establish higher standards for federal information security. NIST would develop the standards after agencies performed comprehensive analyses of their networks and systems to discover where weaknesses lie.

These assessments have been required since 2000 under the Government Information Security Reform Act, and the requirement continues under the Federal Information Security Management Act of 2002. However, Edwards expressed concern that agencies continue to receive failing grades in security from Congress and elsewhere.

"These procedures will strengthen our government's resistance to cyberattacks and will demonstrate to the business community the tremendous value in conducting comprehensive security tests and monitoring new developments," Edwards said in a statement on the Senate floor.

The bill was referred to the Senate Governmental Affairs Committee but is not yet available online.

Featured

  • FCW Perspectives
    remote workers (elenabsl/Shutterstock.com)

    Post-pandemic IT leadership

    The rush to maximum telework did more than showcase the importance of IT -- it also forced them to rethink their own operations.

  • Management
    shutterstock image By enzozo; photo ID: 319763930

    Where does the TMF Board go from here?

    With a $1 billion cash infusion, relaxed repayment guidelines and a surge in proposals from federal agencies, questions have been raised about whether the board overseeing the Technology Modernization Fund has been scaled to cope with its newfound popularity.

Stay Connected