As Cyberattacks Become ‘So Cheap,’ US Vendors Prep for New Rules

An aggressive top-down push to improve federal offices’ cybersecurity will alter workflows for contractors, and the private sector is joined by some voices within the government in objecting to additional regulatory requirements.

Modifications to how vendors manage software sales to breach incident reporting are all coming up in 2023.

The spate of new rules, frameworks, and strategies reflects a dynamic threat landscape in which bad actors have successfully attacked hospital systems, school district networks, and even local drinking supplies. Critical infrastructure all the way up to the government’s trove of sensitive data are at constant risk.

“The scary fact is ...