The saying used to go, ‘you wait for a London bus and one doesn’t turn up, then three all appear at the same time’.

← Back to Blog

The saying used to go, ‘you wait for a London bus and one doesn’t turn up, then three all appear at the same time’. The same can be said for cyber regulation, and technology standards. The enclosed memo focuses efforts on the U.S to secure household IoT, that has similarities with the EU Cyber Resilience Act. With plans to role out in Spring 2023.

I would suggest there are plenty of standards and frameworks in place to address the memo. By example the EU CRA is a comprehensive and crafted document that addresses cybersecurity risk management, to secure digitately enable devices and software services (including IoT). That may save time and effort, and ensure regulatory harmonisation between the U.S and EU for digitally enabled product and service providers.

The U.S simply has to ‘cut and paste’ the CRA, the RMF (already under FISMA), adopt the appropriate cybersecurity framework profiles (RMF), board room governance and oversight (SEC proposal) and regulatory enforcement. All of which is in the CRA that the vendor mentioned in the memo will have to adopt if it gets approval by the EU Commission.

Ted Dziekanowski this would harmonise international cyber standards and compliance and support U.S and EU trade.

#cybersecurity #cyberriskmanagement #cyberlaw #cyberharmonisation #theaugustagroup

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6989117793287733248

Categories

Cybersecurity, Governance & ESG, Regulation & Compliance

Tags