The White House will issue final FedRAMP modernization guidance on Friday, addressing changes in the cloud market and agency needs for diverse mission delivery. The guidance aims to reform the cloud security authorization program by focusing on strategic goals, including rigorous reviews and swift mitigation of security weaknesses by cloud service providers. The memo emphasizes an automated process for security assessments to reduce participant burden and speed up cloud solution implementation. Agencies and the General Services Administration (GSA) have deadlines ranging from 180 days to two years to align with the new requirements, ensuring continuous monitoring and the use of Open Secure Control Assessment Language (OSCAL).

In other news, the Department of Health and Human Services (HHS) announced a major reorganization of its technology policy functions. The chief technology, data, and AI officer roles will move from the Assistant Secretary for Administration to the Office of the National Coordinator for Health Information Technology (ONC), now also titled Assistant Secretary for Technology Policy (ASTP/ONC). The 405(d) Program will transfer to the Administration for Strategic Preparedness and Response. HHS Secretary Xavier Becerra stated the reorganization aims to clarify and consolidate critical functions, preparing the department for future challenges. The new ASTP/ONC office will also seek to fill permanent roles for chief technology, AI, and data officers.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast on on Apple Podcasts, Soundcloud, Spotify and YouTube.

White House to release final FedRAMP guidance; HHS announces major tech and cyber reorganization

Greg Otto talks with Rob Ragan, Principal Technology Strategist at Bishop Fox, as he shares his vision of building an “Iron Man suit” for human security testers that is shaping how AI is used in offensive cybersecurity. Rob dives into lessons learned from developing adaptive AI tools, the unique challenges and risks facing modern AI systems, and effective strategies for safeguarding against adversarial attacks and data leakage. Discover how ethical frameworks, innovation, and industry collaboration can drive responsible offensive security, what organizations often get wrong about AI threats, and what’s needed to secure the future as AI transforms the cybersecurity landscape.

In our reporter chat, Greg Otto talks with Matt Kapko about a new wave of zero-days impacting Ivanti products. 

Bishop Fox’s Rob Ragan and Iron Man Suit for pen testers

Greg Otto talks with Eran Barak, CEO and co-founder of MIND, on the dramatic rise of insider threats in cybersecurity, exploring recent high-profile cases and the factors fueling this surge. He discusses which industries and data types are most at risk, how insider tactics have evolved, and practical strategies for organizations to detect and prevent internal threats. In our reporter chat, Greg talks with Derek Johnson on how vibe coding can be secure as it grows into a practice that software developers rely on for their work.  


LINK: https://cyberscoop.com/vibe-coding-ai-cybersecurity-llm/


MIND’s Eran Barak

A podcast covering the latest news & trends facing top government leaders on topics such as technology, management & workforce. Hosted by Billy Mitchell on FedScoop and released Monday-Friday.

White House to release final FedRAMP guidance; HHS announces major tech and cyber reorganization

The Daily Scoop Podcast

Related tracks