The GAO has completed and assessment of federal Agency response to cyber incidents as required by FISMA and OMB and CISA guidance.

← Back to Blog

The GAO has completed and assessment of federal Agency response to cyber incidents as required by FISMA and OMB and CISA guidance. The GAO identified 23 Agencies covered by the CFO Act 1990 have made progress in preparing incident response plans, incident detection, analysis and handing. However 20 agencies have not met their commitments for cyber investigations and remediation capabilities.

Page 4 of the report highlights the challenges Federal Agencies face with cybersecurity risk management. In 2022 Federal Agencies reported over 30,000 cyber incidents. Having a functioning and mature cyber incident response program is critical if federal government is to respond to the increased threat of cyber attack.

The report does not highlight the 20 agencies that did not reach the required level of maturity by the August 2023 deadline. These agencies being at a Tier 1 or 2,  (Level 1 (Ad Hoc); Level 2 (Defined))

Ted Dziekanowski Brian D. McCarthy

#cybersecurity #cyberincident #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7137718136958504960

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags