New Bill Looks to Tighten Cybersecurity Waivers for Civilian Agencies

Representative Lauren Underwood (D-IL) and Senator Ron Wyden (D-OR) have introduced the Federal Cybersecurity Oversight Act, which would tighten cybersecurity rules for federal civilian agencies enacted in 2015. The earlier legislation established requirements for data encryption and two-factor authentication, but allowed agencies to “issue themselves blanket, indefinite” waivers, according to the bill’s sponsors. “This [new] bill shifts from indefinite waivers to waivers that last one year,” explains a summary of the legislation.