This week, most of the focus around Capitol Hill has been focused on the vote to remove Rep. Kevin McCarthy (R-CA) from his position as Speaker of the House and the resulting impacts of the decision. For example, a notable ramification will be the slowing down of several measures with looming deadlines, including the FY24 NDAA and appropriations bills - which have strong impact on cybersecurity.
However, beyond this focus on federal funding and the speakership, there was still other noteworthy movement on cybersecurity. The FAR Council released two highly anticipated rules that would impose stronger incident reporting requirements for federal contractors, clarify new SBOM reporting rules, and harmonize cybersecurity requirements overall.
Additionally, the House of Representatives also cleared legislation that would lift degree barriers for jobs in cybersecurity and instead align with more relevant cybersecurity skills training. Lastly, CISA and NSA published a joint report on multifactor authentication and single sign-on technologies.