A cyberattack on a UK defense contractor and the theft of sensitive physical security data is of concern.

← Back to Blog

A cyberattack on a UK defense contractor and the theft of sensitive physical security data is of concern. A cyber attack on the UK could be grounds to invoke NATO article 5, but who wants mutually assured destruction? Cyber attacks on the U.S defense and defense industry have been significantly greater than that on the UK defense contractor and recent reports of Chinese technology in U.S defense systems and CNI are more concerning. What about UK defense systems and CNI? If Zaun were a U.S defense contractor it would be considering its compliance to U.S cyber standards, required under contract, and could risk losing a contract.

What is concerning is that the UK does not seem to be addressing the challenges that cybersecurity presents to national, economic and societal security. The U.S DoD regulated the cybersecurity of defense contractors and subcontractors (that includes UK contractors, back in 2017). It is now working to require defense contractors to undergo an independent cybersecurity audit prior to contract award or modification. The EU has released EU NIS 2 and DORA in January 2023, effective late 2024, requiring EU states implement cybersecurity risk management of Critical National Infrastructure providers and Financial Institutions. Tomorrow the U.S Securities and Exchange Commission(SEC) Final Cyber rule becomes effective, requiring SEC covered registrants oversight, assure and attest cybersecurity risk management.

Does the UK have a defensive cyber strategy for industry? As UK partner nations take steps to regulate cybersecurity that affects UK private industry, what steps are being taken to follow suite and regulate cybersecurity risk management at home?

By way of example the SEC rule sets out cyber risk management compliance requirements. As a regulator with a robust enforcement regime and whistle blower program its effect on covered registrants will be tested, and that includes UK firms. (https://lnkd.in/ePpd9xDR)

Ted Dziekanowski Rachel V. Rose, JD, MBA Bob Dix

#cybersecurity #cyberriskmanagement #cyberregulation #cmmc #securitiesandexchangecommission

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7104380836719796224

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags