The Week Ahead: Internet Security Alliance webinar on board-level supply chain risk; NIST discusses AI-enabled vulnerability enrichment

ISA’s webinar series continues on Tuesday with a session on supply chain and third-party risks for corporate boards. ISA kicked off a webinar series this summer to review different aspects of the fifth edition of a cybersecurity handbook for corporate boards, which was developed in partnership with the National Association of Corporate Directors. The speakers include Kemba Walden, president of Paladin Global Institute, and Kris Lovejoy, global head of strategy at IT infrastructure provider Kyndryl, with ISA president and Chief Executive Officer Larry Clinton as moderator.

Walden was acting Nation Cyber Director under the Biden administration before she joined Paladin in 2023. The webinar focuses on a handbook tool that provides a framework for corporate boards to conduct oversight on third-party and supply chain risk. NIST hosts a Thursday webinar on the agency’s efforts to create an agentic AI workflow to assist enrichment efforts in the National Vulnerability Database.

NIST issued an Aug. 12 request for information to get stakeholder input on modernizing the NVD program through integrating AI capabilities. The agency explained plans in an Aug.

13 blog post to leverage AI tools to support vulnerability enrichment in the program. The Institute for Security and Technology hosts a webinar today to discuss the Federal Communications Commission’s E-Rate program, which provides discounts for schools and libraries to adopt telecom and information technology services. The agenda says, “E-Rate currently severely limits the types of cybersecurity technologies that are eligible for program funding, despite the steady drumbeat of cyber incidents affecting school districts.” The webinar features Nick Leiserson, president of cybersecurity at IST; Michael Klein, IST’s senior director for preparedness and response; InnovateEDU CEO Erin Mote; Joseph Wender, executive director of the Schools, Health & Libraries Broadband Coalition; and Narda Jones, fellow at the Joint Center for Political and Economic Studies.

The House Energy and Commerce health subcommittee is holding a Tuesday legislative hearing to consider bills aimed at strengthening the cybersecurity resilience of the healthcare sector. In a Sept. 8 release , House Energy and Commerce Chairman Brett Guthrie (R-KY) and health subcommittee Chairman Morgan Griffith (R-VA) said the hearing will “explore policies that aim to address a growing threat to providers and patients: cybersecurity in our American health care system.” The subcommittee will consider a discussion draft of the Health Care Cybersecurity and Resiliency Act .

The bill would require the Department of Health and Human Services and the Cybersecurity and Infrastructure Security Agency to coordinate on a plan for improving the cybersecurity posture of the healthcare and public health sector. The Rural Hospital Cybersecurity Enhancement Act from Reps. Erin Houchin (R-IN) and Kim Schrier (D-WA) is also on the agenda.

The bill tasks HHS with developing a cyber workforce development strategy for rural hospitals and also requires HHS to provide free cybersecurity training materials to rural hospitals. On Tuesday, Elastic is holding a federal cyber defense breakfast featuring Acting Federal Chief Information Security Office Michael Duffy; Matt House, manager of CISA’s Continuous Diagnostics and Mitigations program; and Richard Grabowski, deputy program manager of the CDM program. NIST holds a quarterly small business community of interest call on Wednesday to provide an update on the agency’s small business program.

The Women in Defense National Conference is taking place today, with panels focused on artificial intelligence.