generated from cloud-gov/pages-uswds-jekyll
-
Notifications
You must be signed in to change notification settings - Fork 6
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Create News “federal-agencies-made-progress-but-need-to-fully-impleme…
…nt-incident-response-requirements”
- Loading branch information
Showing
1 changed file
with
25 additions
and
0 deletions.
There are no files selected for viewing
25 changes: 25 additions & 0 deletions
25
...ies-made-progress-but-need-to-fully-implement-incident-response-requirements.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
--- | ||
layout: news | ||
publisher: Government Accountability Office | ||
title: Federal Agencies Made Progress, but Need to Fully Implement Incident | ||
Response Requirements | ||
url-link: https://www.gao.gov/products/gao-24-105658 | ||
publication-date: December 04, 2023 | ||
description: The U.S. Government Accountability Office (GAO) report highlights | ||
that federal agencies have made progress in cybersecurity, particularly in | ||
incident response, but still need to fully implement specific requirements. | ||
Despite advancements in handling cyber incidents, gaps remain in event | ||
logging, a key aspect for managing cybersecurity incidents effectively. The | ||
GAO stresses the importance of complete adherence to these requirements to | ||
enhance the detection, investigation, and remediation of cyber threats. | ||
synopsis: >- | ||
* Federal agencies have improved in cybersecurity incident response. | ||
* Complete implementation of incident response requirements is still lacking. | ||
* Event logging, crucial for incident management, is inadequately addressed. | ||
* The GAO underscores the need for strict adherence to federal cybersecurity standards. | ||
* Effective detection and handling of cyber incidents hinge on fulfilling these requirements. | ||
--- |