Archive for the ‘NSA’ Category

NSA and Partners Issue Additional Guidance for Secure By Design … – National Security Agency

FORT MEADE, Md. - The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), and international partners released an updated Cybersecurity Information Sheet (CSI) to provide additional guidance for technology manufacturers to ensure their products are secure by design and default.

The joint CSI adds guidance to the Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software report published in April 2023. The new guidance provides more detail on the three secure by design and default principles as they apply to both software manufacturers and their customers.

We need to continue working together to proactively design, build, and deploy secure products for our critical systems, said Rob Joyce, NSA Cybersecurity Director. The implementation of secure by design and default principles not only increases the security posture of manufacturers products, but customers as well.

As indicated in the CSI, the authoring agencies recognize the contributions from private sector partners in advancing secure by design and default implementation. The new CSI is intended to continue enabling international conversation about key priorities, investments, and decisions necessary to achieve a future where technology is safe, secure, and resilient by design and default.

The agencies recommend software manufacturers implement the strategies outlined in the CSI to take ownership of the security outcomes of their customers through secure by design and default principles. The agencies also advise that recommendations in this CSI apply to manufacturers of artificial intelligence (AI) software systems and models.

CISA authored the CSI in collaboration with the Australian Cyber Security Centre (ACSC), the Canadian Centre for Cyber Security (CCCS), the United Kingdoms National Cyber Security Centre (NCSC-UK), Germanys Federal Office for Information Security (BSI), Netherlands National Cyber Security Centre (NCSC-NL), the Computer Emergency Response Team New Zealand (CERT NZ) and New Zealands National Cyber Security Centre (NCSC-NZ), the Korea Internet & Security Agency (KISA), Israels National Cyber Directorate (INCD), Japans National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and Computer Emergency Response Team Coordination Center (JPCERT), the Network of Government Cyber Incident Response Teams (CSIRT) Americas, the Cyber Security Agency of Singapore (CSA), and the Czech Republics National Cyber and Information Security Agency (NKIB).

Read the full report here. Visit our full library for more cybersecurity information and technical guidance.

NSA Media Relations MediaRelations@nsa.gov 443-634-0721

Continued here:
NSA and Partners Issue Additional Guidance for Secure By Design ... - National Security Agency

NSA Shares Recommendations to Advance Device Security Within … – National Security Agency

FORT MEADE, Md. - The National Security Agency (NSA) has released a Cybersecurity Information Sheet (CSI) to enable federal agencies, partners, and organizations to assess devices in their systems and be better poised to respond to risks associated with critical resources. Cybersecurity threats continue to increase, and traditional defenses cannot scale to provide effective security against these threats. Transitioning to a Zero Trust security framework places defenders in a better position to secure sensitive data, systems, applications, and services against nation-state actors and malicious actors seeking quick financial gains. The Advancing Zero Trust Maturity Throughout the Device Pillar CSI provides recommendations to effectively ensure all devices meet an organizations access criteria and security policies. The NSA advises National Security System (NSS), Department of Defense (DoD), and Defense Industrial Base (DIB) network owners and operators to implement the recommendations in the CSI to increase maturity levels of the device pillar capabilities. These include device identification, inventory, and authentication, device authorization using real time inspection, and remote access protection. Traditional security defenses have been shown to be insufficient to address the current threat environment said Alan Laing, NSAs Vulnerability Analysis Subject Matter Expert. Government organizations and critical system owners need to enhance management of their device inventories to improve detection of sophisticated threats as part of comprehensive cybersecurity strategy integrating effective and scalable solutions to secure sensitive data, applications and services. As indicated in the CSI, the device pillar is a foundational component of the Zero Trust security framework. It ensures devices within an environment or attempting to connect to resources in such environment are located, enumerated, authenticated, and assessed. A device is only authorized access if it meets the environments security policies. The device pillar is one of the seven pillars defined in the DoD Zero Trust Reference Architecture. The capabilities discussed in this CSI complement on the Advancing Zero Trust Maturity Throughout the User Pillar published on 14 March 2023. NSA advises progression of the capabilities in each of the seven pillars in the Zero Trust security framework should be seen as a cycle of continuous improvement based on evaluation and monitoring of threats. The NSA Zero Trust security framework adheres to the Presidents Executive Order of Improving the Nations Cybersecurity (EO 14028) and National Security Memorandum 8 (NSM-8), which direct Federal Civilian Executive Branch (FCEB) agencies and NSS owners and operators to develop and implement strategic plans to adopt a Zero Trust cybersecurity framework. Read the full report here. Visit our full library for more cybersecurity information and technical guidance.

NSA Media Relations MediaRelations@nsa.gov 443-634-0721

Read the original:
NSA Shares Recommendations to Advance Device Security Within ... - National Security Agency

NSA calls for a ‘root and branch’ review of Red Tractor – Farmers Guardian

The National Sheep Association (NSA) has called for a root and branch review of Red Tractor following the announcement of the assurance body's Greener Farms Commitment last week.

The association said the industry had been sideswiped' and that it was deeply concerned none of the detail of the new environmental bolt-on which requires farmers to adopt five environment standards.

Following an extraordinary meeting of the NSA English Committee earlier this week, the association has demanded a root and branch review of the assurance scheme and its governance.

NSA chief executive Phil Stocker said the NSA continued to support the concept of farm assurance as an open gate declaration of good practice'. But he continued: "We have long been frustrated that the scheme is losing its way and has become less relevant to sheep farmers with little acceptance of the unique nature of our sector.

"Most of the nation's sheep farms are not big businesses with layers of management, but are family farms and single operators, many with little land of their own, and our sector still offers a valuable first step on the farming ladder for young new entrants. Becoming Red Tractor Assured presents a huge hurdle for many sheep farms, and for most of the sector's routes to market it adds no value."

See also: Red Tractor crossed the 'red line on environmental module introduction

NSA said it believed the Greener Farms Commitment takes Red Tractor into the realm of setting environmental policy in isolation rather than getting behind the key environmental and sustainable farming schemes being introduced by Defra.

Following the meeting of the NSA English Committee on Monday, chair Kevin Harrison added: "It is quite telling that those responsible for the governance of the assurance scheme felt the need to work on this behind closed doors without even consulting their boards or technical advisory committees." NSA Chief Executive Phil Stocker continued:"Anyone who has had any contact with NSA will recognise that we are pro-environment, but the recent announcement of the Greener Farm Commitment, developed with no practical input from ourselves or the farming sector, is flawed and simply a step too far. We do not accept this will remain a voluntary scheme and additionality like this comes with a cost that needs to be supported via market premiums or by full alignment with Defra's Sustainable Farming Incentive (SFI) and Countryside Stewardship schemes.

"We are frustrated by the fact there has been no consideration for the hundreds of sheep farmers who operate as graziers on other people's land and have no influence on wider land management decisions, or direct access to SFI and similar schemes, yet do a great job within the boundaries of their authority. We are not prepared to put at risk the social and cultural makeup of our industry in this drive for more industrialisation, supposed professionalisation, and red tape."

See also: Red Tractor defends 'greenwashing' slur

Earlier this week, the NFU passed a resolution highlighting members' concerns around the detail of Red Tractor's new green module. The union was forced to act following the proposal of a resolution from the Midlands (Transitional) Region which called for an independent review of Red Tractor governance and a pause to further bolt-ons'.

According to the NFU, while members still recognised and embraced' the increasing role of sustainability in farm assurance, some felt more granular, technical and practical elements of the GFC' should have been consulted on more widely before the module was unveiled.

NFU deputy president Tom Bradshaw said: "Red Tractor has been a positive thing for our members and, indeed, is an organisation we helped establish for that very reason... We all accept the roll-out of the GFC has not been as any of us would have wished, but the issue is about procedures, not principles. We can and should work together to address those issues, get past this and move on for the benefit of farmers, growers, the wider supply chain and, crucially, consumers."

A spokesperson for Red Tractor said: "NFU Council have raised the importance of involving farmers in the continued development of Red Tractor's environment module. We agree about how important this is, and that there are benefits for farmers, growers, and the wider supply chain, from a common industry approach.

"Work to this point included trials with 25 farms last year, for example. As the main Red Tractor board agreed last month, our existing Technical Advisory Committees and Sector Boards are meeting over coming weeks to provide their feedback on technical and practical considerations.

"But we recognise there is always more we can do to listen to farmers' feedback and understand their point of view. The new Development Advisory Panel (DAP) is being created and will meet for the first time next month and will have a critical role to ensure that the Greener Farms Commitment (GFC) takes full account of the first-hand experience of farmers."

See the original post:
NSA calls for a 'root and branch' review of Red Tractor - Farmers Guardian

Nansemond-Suffolk tennis falls to Norfolk Academy Thursday – The … – Suffolk News-Herald

Published 6:34 pm Thursday, October 19, 2023

Nansemond Suffolk Academy fell to Norfolk Academy 1-8 in a conference match today at NSA courts. NSAs Kayla Kosiorek knocked off Anderson Legume 6-1, 6-2. Kosiorek and Emma Morgan fell in a hard-fought 8-6 doubles match to Legume and Nora Clingenpeel.

NSA falls to 9-4 overall, 6-2 in conference and #4 ranking in VISAA D-2 rankings.

Singles Kayla Kosiorek (NSA) beat Anderson Legume (NA) 6-1 6-2 Emma Morgan (NSA) lost to Nora Clingenpeel 6-0 6-0 Emma Graves (NSA) lost to Rhea Khanna (NA) 6-1 6-1 Izzy Rose (NSA) lost to Reagan Szakaly (NA) 7-5 6-0 Aubrey Council (NSA) lost to AR Furr (NA( 6-1 6-2 Paige Dowd (NSA) lost to Leighton Soderberg (NA) 6-1 6-1

Doubles Kosiorek/Morgan (NSA) lost to Legume/Clingenpeel (NA) 8-6. Rose/Council (NSA) lost to Szakaly/Khanna (NA) 8-2 Dowd/Rylea Nelms (NSA) lost to Furr/charlotte shumadine (NA) 8-0

Read the original:
Nansemond-Suffolk tennis falls to Norfolk Academy Thursday - The ... - Suffolk News-Herald

Israel’s NSA warns of US intervention as Gaza conflict escalates – IndiaTimes

In a significant development, Israel's national security adviser, Tzachi Hanegbi, has warned that the United States may intervene if the ongoing Gaza conflict escalates further and draws in Iran and Hezbollah in support of Hamas. This warning comes in the wake of expressions of support from U.S. President Joe Biden. During a televised briefing, Hanegbi highlighted President Biden's actions, which include deploying U.S. naval forces in the Mediterranean and publicly cautioning both Hezbollah and Tehran to stay out of the hostilities. "He is making clear to our enemies that if they even imagine taking part in the offensive against the citizens of Israel, there will be American involvement here," Hanegbi stated, emphasizing that "Israel will not be alone." The heightened tensions are palpable on both sides of the Israeli-Lebanese border. Israeli and Lebanese residents in the region have begun to evacuate their homes due to the fear that their towns could become the main battleground in a conflict between Israel and Hezbollah. Smadar Azoulai, a displaced resident of Kiryat Shmona in Israel, expressed the anxiety felt by many, stating, "This time it's a whole different kind of anxiety - terrible fear." Meanwhile, in Lebanon, residents of towns and cities near the border have fled north in anticipation of potential Israeli military action. Uncertainty looms over the region as it could become a second front in a broader Middle Eastern conflict, with Israel's expected invasion of Gaza in response to a surprise attack by Hamas potentially provoking a strong response from regional adversaries. The recent attack on October 7th, resulting in more than 1,300 Israeli casualties, marked the deadliest single day in Israel's 75-year history. In retaliation, Israel has initiated its most intense bombardment of the blockaded Gaza Strip, resulting in over 2,700 Palestinian casualties, with plans for a large-scale ground offensive. As the situation unfolds, the northern border with Lebanon, a hilly region by the sea, stands in stark contrast to the Gaza Strip, located 200 kilometers (130 miles) to the southwest. While the two areas may seem distant, Iran's support for Hamas and Hezbollah has raised concerns. Iran has recently warned of "preemptive action" against Israeli assaults on Gaza, further escalating tensions. Israel has taken precautionary measures, including the evacuation of 28 villages near Lebanon, relocating affected families to tourist resorts in the south. Lebanese residents have sought refuge further north, hoping to avoid Israeli military operations. With the situation in flux, the region remains on edge, and the potential for further escalation keeps residents and observers on high alert. The memory of the 2006 war between Hezbollah and Israel, which began suddenly and without warning, still looms large, with fears of a similar conflict mounting since October 7th. At the Sea of Galilee, hundreds of Israelis from northern kibbutzes are living out of suitcases indefinitely. The prevailing mood is one of fear and uncertainty as people anxiously await the resolution of the crisis and wonder about the future of those affected by the conflict. Amidst these developments, there have been reports of continued violence in the border areas, with Israel's military announcing the killing of individuals attempting to plant an explosive device on the Lebanon-Israel border. Both sides have exchanged fire and targeted military posts and equipment, further heightening the tensions. The situation remains fluid, with the risk of escalation persisting, as regional powers and international actors closely monitor the evolving crisis. (with inputs from Reuters)

See more here:
Israel's NSA warns of US intervention as Gaza conflict escalates - IndiaTimes