As cited
Copy frozen at (site build).
ot ics
McCormick introduces Common-Sense Cloud Security Act to strengthen cloud defenses, protect critical infrastructure
Representative Rich McCormick introduced the Common-Sense Cloud Security Act to direct the National Institute of Standards and Technology (NIST) to develop updated cloud security standards and establish a voluntary certification program for cloud service providers. The legislation addresses vulnerabilities in cloud infrastructure by mandating standards for digital identity management, intracloud attack prevention, third-party application vetting, and artificial intelligence (AI) deployment for threat detection. NIST would publish prototype standards within 50 days and final standards within 135 days, while the Cybersecurity and Infrastructure Security Agency (CISA) would help establish the tiered certification program within one year.
Why it matters: Federal agencies and cloud service providers relying on government contracts must track this legislative pathway, as passage would impose new compliance requirements under FedRAMP updates and mandatory disclosure of blast radius and third-party integration access levels within one year.
- Source published
- First seen by Cybersecurity Tracker