Call us now:
An important step forward for US cybersecurity regulation this week.
On the 1st March the Senate unanimously passed the ‘Strengthening American Cybersecurity Act of 2022’, including FISMA 2022. A package of three cybersecurity bills sponsored by Sen.‚Â Gary Peters‚Â (D-Mich.) and now moves on to the House of Representatives. Speaking with colleague in the US the act was not expected to pass this stage as quickly as it has. (https://lnkd.in/dz_uNCZN)
The Act is important for Federal Agency’s as it provides CISA with a mandate to manage cyber security and sets out cyber incident reporting requirements for critical infrastructure. It is a document that will have a significant impact on US cybersecurity and one suspects that it will progress under current circumstances.
Alongside these requirements FISMA 2002 and 2014 set out requirements to implement a risk based approach for information security supply chain risk management and the adoption of NIST SP 800-37 Risk Management Framework. A program that the DoD is working to implement under DoDi 8510.01 and DoDi 5000.90
Bob Dix, it moved quicker than everyone was expecting. The cherry on top of the cake would be the inclusion of a Chief Risk Officer (CRO) for Federal Agencies. Aligning the regulatory risk management approach adopted by the Financial Services industry (Basel) and supporting the SEC? Enabling a single point of contact to provide oversight and assurance over operational, Information/ cybersecurity risk for OMB and GSA.
Ted Dziekanowski Brian McCarthy Jason Spezzano
#theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cscrm‚Â #scrm #fisma #riskmanagementframework
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6905049635183026176