INTL613Wk5

Three-Quarters of US Federal Agencies Face Cybersecurity Risk Challenges

POPULAR

CLOUD SECURITY | October 19, 2023

Endpoint security in the cloud: What you need to know 9 min read - Cloud security is a buzzword in the world of technology these days — but not without good reason. Endpoint…

Limited network visibility and a lack of standardized IT capabilities have led to an increase in cybersecurity risk across three-quarters of U.S. federal agencies, according to a new government report.

The U.S. Of�ce of Management and Budget (OMB), in collaboration with the Department of Homeland Security (DHS), recently published the “Federal Cybersecurity Risk Determination Report and Action Plan” in response to a presidential executive order issued last year. The researchers used 76 metrics to assess the way federal agencies protect data. Of the 96 agencies analyzed in the report, the OMB classi�ed 71 as “at risk” or “high risk.”

Cybersecurity Risk Assessment Reveals Persistent Challenges

June 5, 2018

By Shane Schick

2 min read

DATA PROTECTION | October 16, 2023

Healthcare breach costs soar requiring new thinking for safeguarding data 6 min read - In the digital age, data is often referred to as the new oil. Its value lies in the insights it can yield, particularly when it comes …

Although 59 percent of agencies said they have processes in place to communicate cybersecurity risk issues, the report’s authors concluded that 38 percent of federal IT security incidents did not have an identi�ed attack vector. In other words, those who encountered a data breach were not able determine how their defenses were penetrated. As a result, the OMB vowed to implement the Director of National Intelligence’s “Cyber Threat Framework” to improve its situational awareness.

Meanwhile, only 55 percent of agencies said they limit network access based on user roles, which opens up myriad cybersecurity risks, and just 57 percent review and track admin privileges.

Standardization can also help reduce risk in government applications. According to the report, a scant 49 percent of agencies have the ability to test and whitelist sofware running on their systems. The authors also suggested consolidating the disparate email systems used across agencies, since this is where phishing attacks are often aimed.

An Untenable Security Situation The OMB cited a need to beef up network visibility and defenses. Its cybersecurity risk assessment revealed, for

GOVERNMENT | October 17, 2023

Cyber experts applaud the new White House cybersecurity plan 4 min read - First, there was a strategy. Now, there’s a plan. The Biden Administration recently released its plan for implementin…

instance, that only 30 percent of agencies have processes in place to respond to an enterprisewide incident, and just 17 percent analyze the data about an incident after the fact.

“The current situation is untenable,” the report asserted. As a result, the authors noted that the DHS is working on a three- phase program to introduce tools and insights to solve security issues, which will begin later this year.

Application Security  |  Cybersecurity Framework (CSF)  |  Cybersecurity Legislation  |  Cyberthreats  |  Federal Government  |  Federal Government Security  |  Government  |  Incident Response (IR)  |  Risk  |  Risk Assessment  |  Risk Management  |  Security Awareness

Shane Schick Writer & Editor

MORE FROM

| October 24, 2023

AI vs. human deceit: Unravelling the new age of phishing tactics 7 min read - Attackers seem to innovate nearly as fast as technology develops. Day by day, both technology and threats surge forward. Now, as we enter the AI era, machines not only mimic human behavior but also permeate nearly…

| October 23, 2023

Taking the complexity out of identity solutions for hybrid environments 4 min read - For the past two decades, businesses have been making signi�cant investments to consolidate their identity and access management (IAM) platforms and directories to manage user identities in one place. However, the hybrid…

| October 19, 2023

Endpoint security in the cloud: What you need to know 9 min read - Cloud security is a buzzword in the world of technology these days — but not without good reason. Endpoint security is now one of the major concerns for businesses across the world. With ever-increasing incident…

| October 18, 2023

Understanding Saudi Arabia’s personal data protection law 4 min read - You may be familiar with data protection laws like HIPAA, GDPR and CCPA. But did you know that other foreign countries are also introducing comprehensive regulations? To address escalating data protection…

Topic updates Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.

Subscribe today

Analysis and insights from hundreds of the brightest minds in the cybersecurity industry to help you prove compliance, grow business and stop threats.

© 2023 IBM Contact Privacy Terms of use Accessibility Cookie Preferences Sponsored by

Cybersecurity News By Topic

By Industry Exclusive Series

Threat Research Podcast

Events Contact

About Us

Follow us on social