CRS Recommends Actions To Enhance Federal Cybersecurity Management

The Congressional Research Service ("CRS") offered recommendations to Congress that would enhance federal cybersecurity management.

In its report, CRS defined cybersecurity as a risk management process that involves continual efforts to (i) identify cybersecurity threats, (ii) protect against potential cybersecurity incidents and (iii) detect, respond and recover from such cybersecurity incidents.

CRS recommended that Congress consider:

• simplifying and unifying the U.S. Code to facilitate streamlined congressional supervision of federal agencies and clarify their cybersecurity requirements;
• the parameters and impact of mandatory cybersecurity reporting requirements, including (i) who must report, (ii) which events necessitate reporting, (iii) the type of information that should be reported and when, (iv) to whom the report should be sent, (v) how the report will be processed and (vi) how the reported information will be shared;