Call us now:
An important read for cybersecurity and the deployment of cyber-risk management across US CNI. The GAO released its findings of the 16 US CNI agencies and their adoption of the NIST ‘Framework for improving critical national infrastructure’ (https://lnkd.in/dXRtpxeY) Adopting a risk based approach for the management of cybersecurity and cybersecurity framework profiles. That requires an robust, effective and integrated risk management program to be in place across the 16 critical SRMA providers and across their supply chains. With a range of compliance from ‘Determined adoption’ though to ‘Have not taken steps to determine adoption’.
The GAO clarified that the purpose of its report was to respond to the increasing threat of cyber attacks ¢â‚¬Å“like the May 2021 ransomware cyberattack on an American oil pipeline system that led to regional gas shortages¢â‚¬Â, adding that such events represent ¢â‚¬Å“a significant national security challenge¢â‚¬Â.
With the cyber regulatory environment in the US moving ahead quickly the report identifies opportunities for CNI providers to address gaps in cyber-risk management and cybersecurity compliance. One has to consider that FISMA and OMB A-130 are enforceable regulations. There are many EOs in place requiring the adoption of cybersecurity and cyber-risk management. The challenge appears to be one of adoption and delivery rather than design and development.
Reports such as this demonstrate there is some way to go in compliance, that maybe addressed by regulation and enforcement actions. Some SMRA sectors adopt an approach to cybersecurity under regulatory regimes that may not be considered by the report. For example Financial Services industry are heavily regulated under regulations such as Basel.
Ted Dziekanowski Brian McCarthy Jason Spezzano
#theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cyberinsurance‚Â #insurance‚Â #defence‚Â #defense‚Â #sec #cni
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6901804291322175489