FED Roundup: December 2020

DISA News

• DISA continues telecommunication modernization efforts amid COVID pandemic
• U.S. Army Fort Bliss to integrate Apple iPad devices into Emergency Vehicles

STIG Updates

• DISA has released the Samsung Android 11 with Knox 3.x Security Technical Implementation Guide (STIG)
• DISA has released the Draft Kubernetes Security Technical Implementation Guide (STIG)
• DISA has released the Apple macOS 11 Security Technical Implementation Guide (STIG)
• DISA has released the latest STIG Applicability Guides for Linux, Mac, and Windows
• DISA has released the Container Platform Security Requirements Guide (SRG)

NIST News

Announcements:

• (None)

Special Publications & Updates:

• NIST SP 1800-24, is now available: Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector
• Draft NIST SP 800-213, IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements
• NISTIR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers
• NISTIR 8259A, IoT Device Cybersecurity Capability Core Baseline
• Draft NISTIR 8259B, IoT Non-Technical Supporting Capability Core Baseline
• Draft NISTIR 8259C, Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline
• Draft NISTIR 8259D, Profile Using the IoT Core Baseline and Non-Technical Baseline for the Federal Government
• NISTIR 8246, Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers
• Draft NISTIR 8286A, Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management
• Supplemental data for SP 800-53 Rev. 5 and SP 800-53B
• NIST Special Publication (SP) 1800-25, Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events
• SP 1800-26, Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events
• Draft NIST Internal Report (NISTIR) 8320A, Hardware-Enabled Security: Container Platform Security Prototype

NIAP News

Updates:

• NIAP Third Quarter Progress Report
• Policy Letter #28, Use of evaluated Dedicated Security Components (DSCs) in Common Criteria Evaluation and Validation Scheme (CCEVS) evaluations

Protection Profile Posting:

• PP-Module for Enterprise Session Controller (ESC), Version 1.0

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe