Information Security Buzz:10/05/22
CISA Director Jen Easterly announced a new Binding Operational Directive (BOD 23-01) on Monday requiring all Federal civilian agencies to report detailed data about vulnerabilities to CISA at timed intervals using automated tools. Snehal Antani commented, “Typically, attackers know more about your enterprise than you do. They gain initial access into your enterprise, discover all of your assets, and plan angles of attack to achieve their objectives. It’s critical for all organizations, including Federal agencies, to view their enterprises through the eyes of an attacker to ensure they don’t have rogue, misconfigured, or vulnerable assets on their network that could lead to a compromise.”