U.S. Rep. Rich McCormick introduced the Common-Sense Cloud Security Act on October 27, 2026, proposing updated cybersecurity standards for cloud infrastructure. Cloud security company Aviatrix said it supports the legislation.

Key Takeaways

  • The bill would direct the National Institute of Standards and Technology to develop updated standards, methodologies and recommendations.
  • The legislation has been introduced, not enacted; the announcement did not specify an effective date.
  • Aviatrix also announced a limited free period for its new cloud security offering.

What the Cloud Security Act would do

The proposal would direct the National Institute of Standards and Technology, or NIST, to develop updated cybersecurity standards, methodologies and recommendations for cloud-based infrastructure.

Aviatrix said some existing cybersecurity programs still rely heavily on approaches designed for data centers. The company argues that cloud standards should also address activity within cloud environments, rather than focusing only on their perimeter.

The announcement did not identify a specific existing rule that the bill would replace or give details of an effective date. The proposal is not law.

Who could be affected

Aviatrix said modernized standards are relevant to government systems, critical infrastructure and private enterprises that use cloud services. CEO and Chairman Doug Merritt said the legislation would help align federal cybersecurity standards with those environments.

The company also linked the proposal to the growth of artificial intelligence workloads in the cloud. It said these workloads can inherit infrastructure access paths, creating security challenges as organizations deploy them.

Aviatrix launches security offering

Separately, Aviatrix said it launched Aviatrix Clearance on October 26. The offering is designed to let security teams limit the outbound and lateral paths available to cloud workloads.

The company said Clearance will be free for enterprises across their entire estates from November 1, 2026, through May 1, 2027, under its Clearance Incident Response Program.

Read More News

More FinanceVelix news

Disclaimer

This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.