The Office of Management and Budget has released draft guidance aimed at making it harder for hackers to access sensitive federal information via contractors, and making it easier for the government to know about it quickly when it happens.
The draft guidance — covering security controls, incident reporting requirements and business due diligence, among other topics — is an attempt by agencies to pool their resources to come up with an answer to a stubborn legal and policy challenge.
