Display Name
Cybersecurity Issues
Details (long)
Cyber Best Practices — Cybersecurity in Hybrid Cloud Environments — Cybersecurity Workforce Development and Strategy — Cybersecurity Acquisition — Digital Technology Cybersecurity — Information Sharing — Open Data — Secure Sharing

Operationalizing Cyber Data: An Analysis of M 26-14

Background

The release of OMB Memorandum M-26-14 on May 22, 2026, marks a profound shift from a compliance-heavy logging mandate to an agile, risk-based operational capability, formally rescinding the rigid frameworks established under M-21-31. While M-21-31 was a critical post-SolarWinds reactive measure designed to raise federal event logging (EL) baselines, its prescriptive demands for retaining vast quantities of data without clear utility proved to be cost-prohibitive and operationally impractical for most agencies. 

Project Approved on

Deliverable Name
Report
Deliverable Type
Report
Deliverable Name
Executive briefing
Deliverable Type
Other
Project/Activity Status
Seeking Volunteers
Interests
Cybersecurity

Department of Transportation

Update of the Federal Chief Information Security Officer (CISO) Handbook

Background

Project Approved on

Deliverable Name
Written Report
Deliverable Type
Report
Deliverable Name
Presentation to the Federal CISO Council
Deliverable Type
Presentation
Deliverable Name
Executive Briefing/Summary Deck
Deliverable Type
Other
Project/Activity Status
In Progress
Interests
Cybersecurity

Dr. Darren Death (EXIM)

Zero Trust Phase 3

The Zero Trust Phase 3 project represents a collaborative effort between government and industry participants under the Cybersecurity Community of Interest (COI). This phase focused on creating practical frameworks and reference materials to support agencies and organizations in implementing and assessing Zero Trust capabilities. The resulting five deliverables – two white papers and three supporting artifacts – advance the collective understanding and application of Zero Trust across diverse operational contexts.

Improving the ATO Process

Improving the ATO Process: Cultural Change, Automation, and Cloud Adoption in Federal Agencies

Cybersecurity Community of Interest
Date Released: September 25, 2025

This paper outlines strategies to modernize the federal Authority to Operate (ATO) process through cultural change, automation, cloud adoption, and Continuous ATO (cATO). It highlights real-world case studies and recommends practical steps for improving efficiency, security, and inter-agency collaboration.

Subscribe to Cybersecurity