Call us now:
Cyber risk ratings, there’s an interesting challenge. Not so much the concept, but the execution. Who decides what good looks like and the rating structure. At present EU cyber regulation such as NIS 2 and DORA set requirements for cybersecurity risk management, they do not set the baseline standards for compliance.
The closest we have to setting a rating for cybersecurity is DoD DFARS that requires defense contractors and subcontractors to self assess their compliance to NIST SP 800-171 from -200 to +110 and submit their score to the DoD for contract award. Ahead of an onside inspection.
The challenge is who sets the baseline and to what standard. A baseline would require International agreement and harmonisation. That we discuss here.
(https://lnkd.in/enfYu2nz)
Ted Dziekanowski
#cyberriskmanagement #cyberregulation #eunis2 #dora #cyberharmonisation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7043198328913686528