Sara Friedman

Linux Foundation is taking over leadership of the Open Secure AI Alliance from NVIDIA, in a move that shifts the industry-led effort to a nonprofit familiar with standing up coalitions to tackle complex cybersecurity and software issues.

CISA and the National Security Agency are urging artificial intelligence companies based in the United States to take specific actions to safeguard frontier AI models, in a joint advisory addressing China-based campaigns that are seeking components of those models for meet their own objectives.

The National Institute of Standards and Technology is continuing work on “cryptographic agility” to provide guidance to agencies on options for implementing encryption-resistant algorithms, according to NIST official Bill Newhouse.

The Energy Department is asking for feedback through a request for information on implementation of a recent Trump executive order to secure bulk power systems through prohibiting certain transactions posing a risk to national security.

DOD CIO Kirsten Davies discussed feedback from a July 13 request for information on potential changes to the Cybersecurity Maturity Model Certification program, in a Sept. 9 appearance at the Billington Cybersecurity Summit where she weighed in how operational technology can be incorporated into the initiative, which focuses on controlled unclassified information.

Acting Federal CISO Michael Duffy highlighted the importance of the Cybersecurity and Infrastructure Security Agency’s continuous diagnostics and mitigation program in a session at the Billington Cybersecurity Summit, emphasizing how the initiative provides visibility into agency efforts to implement directives and make connections for addressing threats.

The Cybersecurity and Infrastructure Security Agency is in the process of reviewing existing structures for public-private partnerships at the agency, as work gets underway to stand up new initiatives under ANCHOR-CI, according to acting agency chief Nick Andersen.

Nichole Clagett, the lead official for CISA’s upcoming incident reporting rulemaking, discussed opportunities to harmonize regulations across government in a Sept. 10 session at the Billington Cybersecurity Summit, while noting that there is a difference between duplication and overlap.

Emerging capabilities in the artificial intelligence space are having an impact on federal government operations designed to understand the entire cyber threat landscape and work with the private sector, according to officials from the Energy Department and other agencies who spoke at the Billington Cybersecurity Summit.

Industry groups presented mixed views to the Federal Communications Commission in response to its inquiry on requiring a Software Bill of Materials at the time of a certification under the equipment authorization program, following up on potential next steps for the program intended to address national security.