Security news aggregator

Latest coverage for Proposal

The Proposal tag covers proposals that could shape cybersecurity policy, technical standards, incident response, and protections for digital systems.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

A proposal is a documented plan for introducing, changing, or funding a security measure, policy, architecture, or project. It turns a problem or requirement into a decision by defining scope, objectives, options, cost, dependencies, owners, and implementation criteria. In security reporting, it may cover a vulnerability-remediation plan, access-control redesign, security tooling purchase, or response to a proposed technical standard.

Its security value depends on connecting identified threats and vulnerabilities to specific controls and verification steps. Reviewers should examine assumptions about assets, trust boundaries, data handling, and third parties; privacy and regulatory constraints where personal data is involved; and plans for testing, rollout, monitoring, exception handling, and reassessment. A proposal that omits residual risk, ownership, measurable acceptance criteria, or maintenance can leave weaknesses unresolved after approval.

Showing 3 most recent headlines Filtered view
Bank Info Security 1 year, 3 months ago

UK Home Office Ransom Ban Proposal Needs More Clarity

Cybersecurity Wonks Find Fault With Home Office Ransomware ProposalsA collection of British cybersecurity policy wonks poured cold water over a British government proposal to outlaw ransom payments by government agencies and from regulated operators of critical infrastructure. A ban wouldn't likely represent a significant blow to ransomware profits.

More from Bank Info Security 5 Apr 2025, 10:00 a.m. Critical Infrastructure Government Proposal Ransom Ransomware United Kingdom
Bank Info Security 1 year, 3 months ago

HSCC Urges White House to Shift Gears on Health Cyber Regs

The Health Sector Coordinating Council is urging the Trump administration to drop work on a proposed HIPAA security rule update and instead engage in a collaborative dialogue with healthcare sector leaders to create alternative cyber requirements, said Greg Garcia, executive director of HSCC.

More from Bank Info Security 4 Apr 2025, 10:30 a.m. America Council Critical Infrastructure Healthcare Proposal
Bank Info Security 1 year, 3 months ago

UK Government Previews Cybersecurity Legislation

Government Says Managed Service Providers Need More RegulationThe British government pledged to introduce stricter rules surrounding incident reporting and supply chain vulnerability patching through legislation it previewed in July 2024. The proposed Cyber Security and Resilience Bill will bring under its scope managed service providers.

More from Bank Info Security 2 Apr 2025, 9:30 a.m. Government Incident Proposal Regulation Service Provider Supply Chain United Kingdom Vulnerability