A Jan. 11 Government Accountability Office report found that as of fiscal year 2020 federal civilian agencies were inconsistent in implementing cybersecurity policies and practices.
A cybersecurity expert who has helped develop security controls for federal agencies is leaving the Federal Information Security Modernization Act project after 17 years, but will continue contributing to best practices.
“We got a lot of negative email on that,” confirmed Ron Ross a fellow at NIST that focuses on cybersecurity, systems security engineering, and risk management.