Cyber Regs Toughened Up

As Congress continues to mull competing proposals for new cyber legislation, federal agencies have moved ahead under existing statutory authority to tighten and toughen the regulations and standards governing cybersecurity for government contractors. In a recent Briefing Paper published by Thomson West, David Bodenheimer and Jon Baker of Crowell & Moring address the escalating cyber threats driving this trend, the existing statutory and regulatory framework imposing information security requirements, and the fundamental elements necessary for a sound cybersecurity program -- including compliance procedures, continuous monitoring, and security controls specified by the National Institute of Standards and Technology (NIST).