Good_老虎社区_美港股上老虎

BeaverTrader
2021-03-26

Good

Software vendors would have to disclose breaches to U.S. government users under new order: draft

SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man

Software vendors would have to disclose breaches to U.S. government users under new order: draft

免责声明：上述内容仅代表发帖人个人观点，不构成本平台的任何投资建议。

推荐
最新

暂无评论

热议股票

关于我们·老虎社区守则·老虎社区账号管理规范·老虎社区服务协议·老虎社区隐私政策

公司名称：北京至简风宜信息技术有限公司

违法和不良信息投诉：010-5681-3562（工作时间9:30-18:30）

邮箱：service@laohu8.com

营业执照：91110105MA01A4U55R

ICP备：京ICP备18016422号

网安备：京公网安备11010502036490

关注我们

{"i18n":{"language":"zh_CN"},"data":{"magic":2,"id":358577317,"tweetId":"358577317","gmtCreate":1616719593539,"gmtModify":1634524395556,"author":{"id":3575226075672377,"idStr":"3575226075672377","authorId":3575226075672377,"authorIdStr":"3575226075672377","name":"BeaverTrader","avatar":"https://static.tigerbbs.com/aeaa28af46ebc499b5865ab2e409655b","vip":1,"userType":1,"introduction":"","boolIsFan":false,"boolIsHead":false,"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[],"fanSize":1,"starInvestorFlag":false},"themes":[],"images":[],"coverImages":[],"extraTitle":"","html":"<html><head></head><body><p>Good</p></body></html>","htmlText":"<html><head></head><body><p>Good</p></body></html>","text":"Good","highlighted":1,"essential":1,"paper":1,"likeSize":5,"commentSize":1,"repostSize":0,"favoriteSize":0,"link":"https://laohu8.com/post/358577317","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"tweetType":1,"viewCount":103,"commentLimit":10,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"symbols":[],"verified":2,"subType":0,"readableState":1,"langContent":"EN","currentLanguage":"EN","warmUpFlag":false,"orderFlag":false,"shareable":true,"causeOfNotShareable":"","featuresForAnalytics":[],"commentAndTweetFlag":false,"andRepostAutoSelectedFlag":false,"upFlag":false,"length":4,"xxTargetLangEnum":"ORIG"},"commentList":[],"hasMoreComment":false,"orderType":2}

Software vendors would have to disclose breaches to U.S. government users under new order: draft

评论（1）

热议股票