https://www.americancityandcounty.com/wp-content/themes/acc_child/assets/images/logo/footer-logo.png
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcast
    • Latest videos
    • Product Guides
  • Resources & Events
    • Back
    • Resources
    • Webinars
    • White Papers
    • IWCE 2022
    • How to Contribute
    • Municipal Cost Index – Archive
    • Equipment Watch Page
    • American City & County Awards
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Statement
    • Terms of Service
American City and County
  • NEWSLETTER
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcasts
    • Latest videos
    • Product Guides
  • Resources/Events
    • Back
    • Webinars
    • White Papers/eBooks
    • IWCE 2022
    • How to Contribute
    • American City & County Awards
    • Municipal Cost Index
    • Equipment Watch Page
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Stament
    • Terms of Service
  • newsletter
  • Administration
  • Economy & Finance
  • Procurement
  • Public Safety
  • Public Works & Utilities
  • Smart Cities & Technology
  • Magazine
acc.com

Smart Cities Solutions


Adi Goldstein/Unsplash

Draft plan of federally mandated cybersecurity measures released for public comment

Draft plan of federally mandated cybersecurity measures released for public comment

  • Written by Andy Castillo
  • 9th September 2021

Since the beginning of the year, the federal government has put forward a number of advisories and orders intended to tighten the nation’s cyber defenses. Most recently this week, the Office of Management and Budget released a draft of its Federal Zero Trust Strategy that supports President Joe Biden’s executive order “Improving the Nation’s Cyber Security,” which he issued in May.  

Comments can be submitted through Sept. 21.  

“The United States government faces increasingly sophisticated and persistent cyber threat campaigns that target its technology infrastructure, threatening public safety and privacy, damaging the American economy and weakening trust in government,” the draft memo reads. 

At its core, the initiative is intended to raise the minimum level of security practices across the board. Following up May’s executive order, which mandated that federal agencies and civilian companies that do business with the government must move toward uniform a zero-trust cybersecurity architecture, the Office of Management and Budget’s strategy outlines next steps.  

Traditionally, the federal government has used perimeter-based defenses—authorized users are able to freely access digital spaces once they’re through security. Zero-trust cybersecurity architectures are radically different, in that no user is trusted with any kind of access. Rather, everyone must continuously confirm their identity.  

“The foundational tenant of the Zero Trust Model is that no actor, system, network or service operating outside or within the security perimeter is trusted. Instead, we must verify anything and everything attempting to establish access,” according to the Department of Defense’s Zero Trust Reference Architecture brief. “It is a dramatic paradigm shift in philosophy of how we secure our infrastructure, networks and data, from verify once at the perimeter to continual verification of each user, device, application and transaction.” 

Outlined in the plan are a number of proposed baseline zero-trust security measures like universal activity logging, single sign-on and multi-factor authentication, reliable asset inventories and ubiquitous use of encryption—a process of encryption that gives only the sender and recipient decryption key. 

“While the concepts behind zero trust architectures are not new, the implications of shifting away from ’trusted networks’ are new to most enterprises, including many federal agencies,” the draft notes. “This will be a journey for the federal government, and there will be learning and adjustments along the way as agencies and policies adapt to new practices and technologies.” 

The memorandum would require that federal agencies achieve specific zero trust security goals by the end of 2024. Among those requirements are the implementation of phishing-resistant multi-factor authentication systems, an inventory of every device that’s owned by the agency, encryption of all domain name system (DNS) requests and HTTP traffic, rigorous and routine testing of applications and cloud security measures, among others. 

While sweeping, the draft emphasizes that it’s a necessary step—and not just for the federal government.  

Cyber breaches are becoming more and more common. On Thursday, for example, Dorchester County, South Carolina announced that a phishing attack earlier in the year compromised sensitive information of its residents. 

“The phishing incident resulted in unauthorized access to certain information collected and maintained by the County for a variety of reasons, including names, addresses, email addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account numbers, credit card and debit card numbers, usernames and passwords, and medical information,” says the statement, which was issued by the Dorchester County Government. 

For local governments looking to update their own cybersecurity standards to a zero trust model, more information published by the National Cybersecurity Center of Excellence can be found on the agency’s website. Public comments about the Office of Management and Budget’s Federal Zero Trust Strategy draft memo can be sent to [email protected].

Tags: homepage-featured-2 homepage-featured-4 News Smart Cities & Technology Smart Cities Solutions

Most Recent


  • New York City, New York
    Report: While remote work is causing offices to empty out, walkable cities are still in high demand
    Given the reliance on vehicular transportation in the United States, some American cities historically haven’t prioritized being walkable in past planning and or design. But amid an unprecedented shift in the economy toward remote work, those that have are increasingly desirable for prospective residents. A new report from Smart Growth American and Places Platform, “Foot Traffic […]
  • landslides
    Managing landslides along road corridors using remote sensing
    Maintaining roads is an optimization problem. Local officials must balance limited and sometimes shrinking budgets with the needs of their communities to have safe and reliable transportation systems. Unfortunately, the importance of a particular maintenance issue is often judged based on anecdotal information and complaints from the public rather than hard data. This approach is […]
  • resilience
    Report: Prioritizing neighborhood infill, expanding transit options increases neighborhood resilience
    With the threat of climate change looming, cities that prioritize neighborhood resilience and equity will be best equipped to withstand future challenges. Last week, the United States Conference of Mayors and the Wells Fargo Institute for Sustainable Finance released a report highlighting strategies for communities looking to address the impact of the climate crisis. “Mayors […]
  • great downtown
    10 American cities with a great downtown
    From small New England town commons to bustling Southern centers and Western squares, downtowns serve as a city’s backbone. Beyond office space, they’re hubs for social activities, fine dining and cultural experiences. But not every downtown is equal. With a focus on renters and options apartment amenities, a new ranking from StorageCafe ranks America’s best […]

Leave a comment Cancel reply

-or-

Log in with your American City and County account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • Tech giants pledge billions, commit to bolstering public cyber defenses
  • Historically called in following natural disasters and during emergencies, National Guard cybersecurity units can help municipalities in the digital realm
  • Local government’s role in citizen engagement: It’s now digital
  • Cybersecurity legislation included in infrastructure plan sets aside $1 billion for local governments

White papers


Modernizing government services for today’s resident expectations

24th January 2023

Preparing Your Community Now for the Next Generation of Older Adults

18th October 2022

Helping Government Fleets Achieve Their Goals

30th September 2022
view all

Webinars


How To: Evaluate Digital Government Service Delivery Technologies

23rd January 2023

Using Technology to Enhance Communications

29th November 2022

Learn the benefits of transforming and automating your Contract Management process

4th November 2022
view all

PODCAST


Young Leaders Episode 4 – Cyril Jefferson – City Councilman, High Point, North Carolina

13th October 2020

Young Leaders Episode 3 – Shannon Hardin – City Council President, Columbus, Ohio

27th July 2020

Young Leaders Episode 2 – Christian Williams – Development Services Planner, Goodyear, Ariz.

1st July 2020
view all

GALLERIES


Report: While remote work is causing offices to empty out, walkable cities are still in high demand

26th January 2023

10 American cities with a great downtown

24th January 2023

Miami leads the way in FT-Nikkei ranking of best U.S. cities for foreign companies

20th January 2023
view all

Twitter


AmerCityCounty

Report: While remote work is causing offices to empty out, walkable cities are still in high demand dlvr.it/ShVhBW

26th January 2023
AmerCityCounty

Managing landslides along road corridors using remote sensing dlvr.it/ShTpL6

26th January 2023
AmerCityCounty

Report: Prioritizing neighborhood infill, expanding transit options increases neighborhood resilience dlvr.it/ShRrFM

25th January 2023
AmerCityCounty

10 American cities with a great downtown dlvr.it/ShNxXH

24th January 2023
AmerCityCounty

With a few strategies and tools, public procurement directors can recruit new, diverse staffers dlvr.it/ShNnj4

24th January 2023
AmerCityCounty

Oakland launches smart loading zone program for commercial unloading at the curbside dlvr.it/ShNkMg

24th January 2023
AmerCityCounty

Modernizing government services for today’s resident expectations dlvr.it/ShNGq0

24th January 2023
AmerCityCounty

Report: Technology is evolving quickly, and the water and sewer sector needs to adapt dlvr.it/ShL0B5

23rd January 2023

Newsletters

Sign up for American City & County’s newsletters to receive regular news and information updates about local governments.

Resale Insights Dashboard

The Resale Insights Dashboard provides model-level data for the entire used equipment market to help you save time and money.

Municipal Cost Index

Updated monthly since 1978, our exclusive Municipal Cost Index shows the effects of inflation on the cost of providing municipal services

Media Kit and Advertising

Want to reach our digital audience? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • IWCE’s Urgent Communications
  • IWCE Expo

WORKING WITH US

  • About Us
  • Contact Us

FOLLOW American City and County ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.