Call us now:
The enclosed 65 page report by the National Security Advisory Committee (NSAC), is a positive read. The NSAC advises the U.S president on national security and emergency preparedness (NS/EP) telecommunications and cybersecurity policy. The report sets out comprehensive requirements for the U.S Presidents Office to develop economic incentives; coordinate and simplify cybersecurity regulation, aligning regulations to the NIST CSF 2 framework; and track cybersecurity adoption. It provides some authoritative figure on the impact of cybersecurity.
The adoption of cybersecurity is critical for national security and one of the biggest challenges is how to support those that cannot afford to implement cybersecurity. 99% of all societies companies are made up of SMEs and a significant percentage of society is made up of those that cannot afford to protect themselves from cyber fraud and crime. It is critical that governments develop solutions to support those that cannot afford to implement cybersecurity practices and defend themselves adequately against cyber crime.
In 2021 we wrote a number of papers called the Augusta Plan in 2021 and 2022, presenting these to the Cyberspace Solarium Commission, DoD and ONCD (https://lnkd.in/e62Gjh-H), thank you Bob Dix. Setting out carrots and sticks to support SMEs define baselines for cybersecurity the adoption, oversight and assurance of cybersecurity risk manage by SMEs.
@Thaddeus Dziekanowski, the only challenges one has about the report is its focus on cybersecurity, not cybersecurity risk management, and the need to set a baseline for cybersecurity compliance. While focusing on the adoption of CSF for example is important, it should be within the context of cybersecurity risk management. The calculation of a realistic ROI for cyber is an almost impossible task, akin to asking an organisation to quantify specifically the benefits of quality management.
One also sees a benefit in the reduction of operation costs such as insurance, that one has said many times is a benefit of the adoption of effective cybersecurity regulation, as it transfer cybersecurity risk ‘Left of Bang’, through proactive, rather than reactive cyber risk management implementation.
The report provides a benchmark for other governments to adopt cybersecurity.
Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner
Office of the National Cyber Director
National Institute of Standards and Technology (NIST)
U.S. Cyberspace Solarium Commission
Veritas GRC
#cybersecurity #cyberriskmanagement #nstac
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7173584577964265472