The National Institute of Standards and Technology late last week published new guidance to help organizations develop and implement an information security continuous monitoring (ISCM) program. This initiative can help companies better provide ongoing awareness of threats and vulnerabilities, assess the effectiveness of deployed security controls and support risk management decisions, according to the 80-page guidance document. A mature ISCM program, which requires the use of both automated and manual processes, will enable companies to move from compliance-driven to data-driven risk management.
SecurityWeek reports that organizations across the IT, energy, and government sectors had significantly lower budgets for industrial control systems and operational technology cybersecurity this year, compared with 2022.
CNN reports that major U.S. voting equipment vendors Election Systems & Software, Unisyn, and Hart InterCivic have taken part in a new cybersecurity testing program that would subject election systems to cybersecurity stress tests ahead of next year's polls in an effort to combat false election rigging claims during the 2020 election.