OMB gives agencies 60 days to identify critical software and begin securing it

guest · Aug 11, 2021

OMB gives agencies 60 days to identify critical software and begin securing it
August 11, 2021
https://www.fedscoop.com/white-hous...tify-critical-software-and-begin-securing-it/

The Office of Management and Budget has given federal agencies 60 days to identify all their critical software in use or being acquired and a year to secure it, according to a memo issued Tuesday.

OMB directed agencies to focus on securing standalone, on-premise software performing “security-critical” functions or posing “significant potential for harm” if compromised, during the initial implementation phase of critical software guidance released by the National Institute of Standards and Technology on July 8.
Click to expand...

Phase 1 of implementing NIST’s guidance includes software handling: identity, credential and access management; operating systems, hypervisors and container environments; web browsers; endpoint security; network control; network protection; network monitoring and configuration; operational monitoring and analysis; remote scanning; remote access and configuration management; and backup/recovery and remote storage.

“Agencies should keep in mind that the measures identified in the guidance from NIST are not comprehensive,” reads the memo. “Their adoption may not eliminate the need to implement additional security measures to satisfy requirements and objectives that lie outside the scope of the NIST guidance.”
Click to expand...

EASTER · Aug 12, 2021

If only the OPM got a ultimatum with that timetable.

Log in or Sign up

OMB gives agencies 60 days to identify critical software and begin securing it

guest Guest

EASTER Registered Member

Log in or Sign up

OMB gives agencies 60 days to identify critical software and begin securing it

guest Guest

EASTER Registered Member

Useful Searches