McCormick introduces Common-Sense Cloud Security Act to strengthen cloud defenses, protect critical infrastructure – Industrial Cyber

McCormick introduces Common-Sense Cloud Security Act to strengthen cloud defenses, protect critical infrastructure A U.S. Republican Representative from Georgia introduced the Common-Sense Cloud Security Act to strengthen cloud cybersecurity by directing the National Institute of Standards and Technology (NIST) to develop updated standards for protecting sensitive data, preventing cyberattacks and securing critical infrastructure. The legislation would strengthen protections against unauthorized access and malicious activity while establishing a voluntary certification program to help cloud service providers meet modern cybersecurity standards. Rich McCormick identified that the move addresses risks to information stored and accessed through cloud-based systems, including financial information, medical records, national security data and critical infrastructure systems. The proposed legislation would require NIST to work with federal cybersecurity officials, cloud service providers, critical infrastructure operators and academic experts to address cloud vulnerabilities, including through the use of artificial intelligence to detect suspicious activity.

Furthermore, it would also direct NIST to report to Congress on federal implementation, private-sector adoption challenges and recommendations for improving cloud security, update the Federal Risk and Authorization Management Program (FedRAMP), and establish a voluntary, tiered cloud security certification program based on independent, accredited testing. Other provisions would strengthen third-party software integration vetting, authorization and continuous monitoring, improve methods for assessing the scope and spread of cloud security breaches, and enhance digital identity protections by linking account