Author Archive
Mariam Baksh
Senior Correspondent
Companies
CISA Issues vulnerability-management tools dependent on industry action
Federal agencies are under a binding operational directive to address exploitable security vulnerabilities in their software, but the success of CISA’s effort relies on the cooperation of software vendors.
- By Mariam Baksh
Companies
CISA, NSA and industry outline security responsibilities of software suppliers
New guidance from the federal agencies—and major companies serving the government—tries to distinguish between the security duties of software developers, suppliers and consumers.
- By Mariam Baksh
Contracts
Industry objections spur changes to cybersecurity provisions in defense bill
Key members of the House and Senate are altering proposals for identifying systemically important critical infrastructure and securing the software supply chain.
- By Mariam Baksh
Companies
FCC adds China-linked telecom providers to list of national security threats
The departments of Defense and Justice want the agency to take a more comprehensive approach to preventing foreign adversaries from accessing Americans’ communications and data.
- By Mariam Baksh
Contracts
OMB: new acquisition rule coming for vendors to vouch for their software security
Agencies are also allowed to accept to-do lists from vendors who need to keep working up to a point where they can self-attest their compliance with NIST guidance.
- By Mariam Baksh
Contracts
NIST selects 12 companies for implementing post-quantum cryptography
Officials leading a standardization effort—based on four winning algorithms—are relying heavily on industry for success.
- By Mariam Baksh
Contracts
Secretary of State makes case for tech-centered strategy to counter China
The secretary delivered a speech outlining the administration’s policy toward Beijing as Congress tries to reconcile legislation that would provide at least $50 billion to increase domestic production of semiconductors.
- By Mariam Baksh
Contracts
Senate committee clears bill that takes on conflicts of interest in federal contracting
A hearing the committee held leading up to the bill’s markup focused on a shortage of procurement officials in the federal workforce, which an industry witness said could be addressed if it weren’t for inflexible ethics rules.
- By Mariam Baksh
Contracts
US, allied cybersecurity agencies, advise reviewing contracts with tech vendors
A joint advisory from CISA, domestic partners and counterpart agencies in the Five Eyes intelligence alliance warns of a heightened threat to managed service providers and their customers.
- By Mariam Baksh
Contracts
Microsoft, DoD sign research and development pact
The company may have the chance to negotiate exclusive intellectual property rights—with an exception for the government—to innovations emerging from the collaboration.
- By Mariam Baksh
Companies
Google surveys federal employees in fight with Microsoft for government market
The survey report tried to associate heavy reliance on Microsoft’s products with greater susceptibility to cyberattacks.
- By Mariam Baksh
Contracts
NIST Suggests Agencies Accept the Word of Software Producers Per Executive Order
The standards agency said an attestation from vendors themselves would be sufficient when screening for cybersecurity, unless an agency's risk calculus suggests otherwise.
- By Mariam Baksh