Federal CIO: Expect New Cybersecurity Reporting Metrics by Year’s End

NextGov: Changes are coming to how agencies report on their cybersecurity posture as FISMA guidelines are updated to better reflect the administration’s focus and priorities, a top tech official said.

The reports—named for the Federal Information Security Management Act of 2002 that established the reporting requirement—detail the cyber incidents captured by an agency’s information security teams within a given year and categorize them using standards set by the National Institute for Standards and Technology. The frequency and breadth of the reports have changed over the years due to additional legislation but now the Trump administration is putting its mark on the process to match its priorities.

Read article