Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in water sector attacks this summer.

The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives.

In a letter first reported by CyberScoop, Ron Wyden, D-Ore., said ‘devastating’ attacks on the federal government have accumulated due to the tech.

A vulnerability that meets all four criteria would need to be fixed within three days, for instance.

Acting director Nick Andersen said a binding operational directive is en route for agencies, and that more specific discussions need to happen with critical infrastructure owners.

A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent…

While CISA says the catalog is catching on, some think it needs improvement.

CISA wants agencies to tackle nearly 300 flaws in all, ranging from within two weeks to six months.

It’s the latest sign that federal officials are warming to white-hat hackers from various walks of life.

The Department of Homeland Security’s cybersecurity division is trying something new in appealing for public input before issuing an order.