White House Updates Cyber Security Policy

The White House has issued a new cyber security policy that points toward continuous monitoring and patching and more effective cyber security spending, according to InformationWeek.

The guidance takes a “three-tiered approach” to FISMA:

1. Near real-time reporting of of cyber security data feeds directly from agency security and management tools to the recently implemented Cyberscope security reporting tool operated by the Department of Homeland Security.
2. Government-wide benchmarking on agencies’ security postures.
3. Agency-specific interviews to help ascertain the needs and proper metrics for individual agencies.