Call us now:
Cybersecurity regulation and enforcement are developing, rapidly driving cybersecurity risk management compliance. Requiring Boards and cybersecurity professionals to oversight, assure and attest cybersecurity risks and compliance.
The Securities and Exchange Commission’s cybersecurity risk management proposal, EU NIS 2.0, the EU DORA, U.S DoD DFARS/ CMMC, and FISMA are examples of developing cyber risk regulations. Setting a paradigm for cybersecurity that drives and enforces ‘Left of Bang’ compliance and situational awareness through risk management. Regulations that have regulatory enforcement regimes underwriting their compliance.
In our paper ‘Left of bang, the regulatory paradigm that drives cybersecurity risk management compliance ahead of cybersecurity and incident response.’ We discuss the evolving cybersecurity risk management landscape in the context of ‘Left of Bang’ as developed for the U.S. Marines and used successfully in kinetic conflict.
Left of bang was developed to improve situational awareness and prevent incidents from occurring in the first instance, as the name left of bang suggests, before they become a significant issue and require costly remediation.
In our opinion the developing cyber regulation should be viewed through a ‘left of bang’ lens, that many boards and cyber professionals will have to develop. Requiring boards to identify, assess, mitigate and report cybersecurity risks. Similar to the approach adopted by Finance Institutions under the ‘three lines of defence’ model.
The risk management process for example following NIST SP 800-37, requires a broad range of data used to identify, assess, mitigate and report risks. Data that will be required to comply with cybersecurity risk management regulatory proposals. Creating a foundation for situational awareness.
Ted Dziekanowski
#leftofbang #cybersecurityriskmanagement #regulation #governance #usmarines #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6952155162853441536