Security News > 2021 > March > Executive Order Would Strengthen Cybersecurity Requirements for Federal Agencies

The U.S. federal government is mulling changes to up its cybersecurity software game in the wake of the sprawling SolarWinds cyberattacks that came to light in December, including requiring data-breach notifications.

In a draft executive order from President Joe Biden, software companies would be required to disclose any security issues to government users, according to a report from Reuters.

"The federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly," a spokeswoman for the National Security Council told the outlet.

The order as it now stands would also require vendors to keep digital records and work with the FBI and the Cybersecurity and Infrastructure Security Agency on incident response, according to the report.

Finally, the draft order would create a cybersecurity incident-response board, which would have a mission of information-sharing.

The board would bring together federal representatives and cybersecurity researchers to host a forum for vendors; and, it would offer both incentives and liability protections to encourage participation, according to Reuters.

News URL

https://threatpost.com/executive-order-cybersecurity-federal-agencies/165056/