Three years on from Biden infosec EO, and we're still trying to check all the boxes
(2024/05/06)
- Reference: 1715007614
- News link: https://www.theregister.co.uk/2024/05/06/biden_infosec_eo_update/
- Source link:
interview It's been several years since President Biden signed an executive order to improve America's cybersecurity. The US Government Accountability Office said recently there's still a number of critical goals stemming from that order to accomplish.
To be fair, 49 of the 55 objectives have been met, the GAO said in a [1]report . Unfortunately, those that remain are rather important, Marisol Cruz Cain, GAO director of information technology and cybersecurity – and author of the report – told The Register in an interview you can watch below.
"I think they're all pretty critical," Cruz Cain told us of the outstanding tasks. You can see the full interview below.
[2]
[3]Youtube Video
[4]
Those items include the need for several government agencies to define what they believe is meant by "critical software," a crucial step in protecting the nation's IT.
"CISA told us they have a preliminary definition and also [a] preliminary list of what would be considered critical software, but they're still refining it," Cruz Cain said. "Along with NIST and OMB [United States Office of Management and Budget], they told us that they plan on getting that out in September of 2024."
[5]
With a presidential election coming up in November, Cruz Cain doesn't think there's any real possibility that an incoming administration would undo the progress enabled by [6]the 2021 cybersecurity executive [7]order .
"Information security is a bipartisan issue," Cruz Cain said. "Everybody wants all systems protected." ®
Get our [8]Tech Resources
[1] https://www.gao.gov/products/gao-24-106343
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zjj@lnKrpsTHOtQWvkOx4QAAAJQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://youtu.be/L8JWxzpLC-Y?si=PZIbi02h2CgKlLal
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zjj@lnKrpsTHOtQWvkOx4QAAAJQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zjj@lnKrpsTHOtQWvkOx4QAAAJQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2024/02/08/us_tech_industry_changes/
[7] https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/
[8] https://whitepapers.theregister.com/
To be fair, 49 of the 55 objectives have been met, the GAO said in a [1]report . Unfortunately, those that remain are rather important, Marisol Cruz Cain, GAO director of information technology and cybersecurity – and author of the report – told The Register in an interview you can watch below.
"I think they're all pretty critical," Cruz Cain told us of the outstanding tasks. You can see the full interview below.
[2]
[3]Youtube Video
[4]
Those items include the need for several government agencies to define what they believe is meant by "critical software," a crucial step in protecting the nation's IT.
"CISA told us they have a preliminary definition and also [a] preliminary list of what would be considered critical software, but they're still refining it," Cruz Cain said. "Along with NIST and OMB [United States Office of Management and Budget], they told us that they plan on getting that out in September of 2024."
[5]
With a presidential election coming up in November, Cruz Cain doesn't think there's any real possibility that an incoming administration would undo the progress enabled by [6]the 2021 cybersecurity executive [7]order .
"Information security is a bipartisan issue," Cruz Cain said. "Everybody wants all systems protected." ®
Get our [8]Tech Resources
[1] https://www.gao.gov/products/gao-24-106343
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zjj@lnKrpsTHOtQWvkOx4QAAAJQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://youtu.be/L8JWxzpLC-Y?si=PZIbi02h2CgKlLal
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zjj@lnKrpsTHOtQWvkOx4QAAAJQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zjj@lnKrpsTHOtQWvkOx4QAAAJQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2024/02/08/us_tech_industry_changes/
[7] https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/
[8] https://whitepapers.theregister.com/