As the decade comes to a close, it's certainly a relief to see that the Cybersecurity and Infrastructure Security Agency (CISA) is continuing to adjust its policies and creating more "binding operational directives" (BODs) designed to encourage improved communication in response to possible new threats in the cyber-sphere.  One BOD in particular will force government agencies to interact in a positive manner with voluntary bug reporters.  In the past, some agencies would treat these so-called "White Hat Hackers," who come forward with helpful information regarding system flaws and vulnerabilities, as criminals.  Under the proposed rules, federal agencies are required to provide and monitor channels for individuals to use in reporting security flaws.  Agencies will also have to respond and keep researchers updated on their efforts to fix identified security issues. Additionally, agencies are no longer allowed to publish...(Read Full Post)