The agency developed an online comment tool to release future controls and assessment procedures concurrently to keep pace with evolving cyber threats.

In a recent audit, the DOD IG observed a mixed bag of some DOD components leveraging reciprocity and others not.

GAO says acquisition practices for the new system, HART, must also be improved.

A new GAO report reveals that few agencies have implemented recommended practices for managing IT supply chain risks, especially pertinent following the SolarWinds attack.

The department wants to better understand its supply chain of IT vendors and be able to rapidly discover or anticipate risks to its networks.

The agency wants "one, seamless airport environment."

The five-year BPA streamlines acquisition of hardware and software products and services to not only federal agencies but state, local and tribal governments.

The program's acting director said her office is looking for "quick wins" now that its Ideation Challenge is over.

The department has launched risk analysis initiatives at national labs, rather than waiting for the perfect metrics, to establish standards.

The scores won't be public, though, "because we know adversaries will be looking to see which agencies are having problems," says Continuous Diagnostics and Mitigation program manager…