“Until agencies more effectively implement the government’s approach and strategy, federal systems will remain at risk,” GAO warned.

Only one of the 26 email domains managed by the Executive Office of the President uses DMARC.

When federal agencies have for the first time to include mobile devices and apps in their information security reporting for FY2018 starting this October, they may be…

For nearly a third of the cybersecurity incidents reported to the Department of Homeland Security by federal agencies, the agency had no information about what kind of…

The National Institute of Standards and Technology has removed the word "federal" from the title of its magisterial catalogue of cybersecurity and privacy controls.

The latest revisions to NIST's canonical SP 800-53 catalogue of cybersecurity controls integrate privacy measures and make the document more welcoming to non-feds.

On average, for each one percent of its spending that an agency shifts from maintaining legacy systems to buying new ones, it can expect a five percent…

The reporting rules have changed, so the numbers of incidents aren't directly comparable with last year, but officials say the picture shows progress.