A cross-agency security audit finds that 67 percent of agencies are using VPN solutions with known unpatched vulnerabilities, creating significant risk for the 1.2 million federal teleworkers.
CISA and OMB announce a multi-year program to consolidate 47 individual agency Security Operations Centers into 12 shared SOC service centers, requiring significant workforce transition planning.
A new FAR rule requires software suppliers to federal agencies to submit secure development attestations, creating training requirements for both agency contracting officers and contractor software development teams.
The President’s FY2027 budget request includes $28 billion for federal cybersecurity — a 22 percent increase — with significant allocations for workforce training and the Zero Trust transition.
DISA’s annual mobile security assessment finds 71 percent of federal agencies have deployed Mobile Device Management solutions, but only 34 percent configure MDM profiles to DISA STIG requirements.
New federal contract requirements mandate cybersecurity insurance minimums for contractors handling federal data, with insurers requiring evidence of specific security training programs as underwriting criteria.
A new CISA Binding Operational Directive mandates Zero Trust Architecture maturity across all five pillars for every civilian federal agency before December 31, 2026.
NIST CSF 2.1 introduces a Govern function enhancement and updated Supply Chain Risk Management subcategories that directly affect federal agency security programs.
Cybersecurity school launches Zero Trust learning pathway with detailed context for public-sector learning, courses, evaluations, credentialing, research, B2G deployment, and academy-level governance.
Cybersecurity school launches Zero Trust learning pathway with detailed context for public-sector learning, courses, evaluations, credentialing, research, B2G deployment, and academy-level governance.