Dark Reading
2 years, 2 months ago
Is CISA's Secure by Design Pledge Toothless?
CISA's agreement is voluntary and, frankly, basic. Signatories say that's a good thing.
Security news aggregator
Latest coverage for CISA
Stay informed on the latest CISA updates, guidelines, and alerts critical for robust information security and cyber threat prevention.
4
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Cybersecurity and Infrastructure Security Agency (CISA) is the U.S. Department of Homeland Security agency for reducing cyber and physical risks to critical infrastructure and federal civilian networks. Created by the 2018 CISA Act, it works with government and industry, publishes alerts and guidance, and coordinates assistance during significant incidents. Its direct federal-network role chiefly covers the Federal Civilian Executive Branch, including .gov; private-sector engagement is often voluntary or sector-specific.
Practitioners use CISA advisories and the Known Exploited Vulnerabilities catalog to prioritize patching where exploitation has been observed, and consult applicable directives and incident-response guidance. CISA supports vulnerability reporting and promotes controls such as multifactor authentication, logging, and tested recovery. A CISA alert is an actionable risk signal, not proof every organization is affected; teams should verify product, version, exposure, and obligations.
Showing 4 most recent headlines
Filtered view
Dark Reading
2 years, 2 months ago
CISA Courts Private Sector to Get Behind CIRCIA Reporting Rules
New regulations will require the private sector to turn over incident data to CISA within three days or face enforcement. Here's how the agency is presenting this as a benefit to the entire private sector.
Dark Reading
2 years, 2 months ago
Tech Companies Promise Secure by Design Products
Over 60 companies sign the secure by design pledge from CISA to consider security from the design phase and throughout the product life cycle.
Dark Reading
2 years, 2 months ago
Does CISA's KEV Catalog Speed Up Remediation?
Vulnerabilities added to the CISA known exploited vulnerability (KEV) list do indeed get patched faster, but not fast enough.