White House Updates Cybersecurity Orders

“The White House issued new cybersecurity marching orders to government agencies Wednesday, which top officials say will help redirect government efforts from wasteful paperwork compliance toward continuous monitoring and patching and more effective cybersecurity spending.

Many observers both inside and outside government have come to the conclusion that the government’s cybersecurity reporting requirements, as currently implemented, have created an environment in which expensive annual compliance reports that cut into real cybersecurity have become the norm. ‘These reports ended up being more secure in the cabinets they were living in than were the systems they were meant to protect,’ federal CIO Vivek Kundra said in a conference call with reporters and White House cybersecurity coordinator Howard Schmidt. “

(White House Updates Cybersecurity Orders — Government Security — InformationWeek)