If you are going to read anything this week, read this.

← Back to Blog

If you are going to read anything this week, read this. With amendments proposed to NDAA 2022 for FISMA 2021, FISMA is on the legislative and regulatory radar. There have been amendments made to FISMA 2014 by OMB, under Executive Order‚ 14028, Improving the‚ Nations‚ Cybersecurity.

FIMSA is an important cyber regulation in the US along with OMB A-130. Requiring all Federal Agencies and their sub-contactors to implement the risk management framework (NIST SP 800-37R2 (RMF)). Modifications to FISMA are critically important to note. I suspect these changes have been made ahead of any challenges with getting FISMA 2021 updates through Congress and the NDAA 2022.

The Amendments set out a number of significant updates to FISMA by OMB, including.
1. Ground truth testing – ‚ The‚ Federal‚ Government‚ must‚ rely‚ more‚ on methods‚ that‚ empirically validate security‚ and find‚ weaknesses.
2. Observable security outcomes – FISMA‚ assessments must‚ evolve‚ to focus‚ on‚ risk- based processes‚ that will provide‚ agencies‚ with‚ sufficient information‚ to‚ consider‚ threat, capability,‚ and‚ impact.
3. Automation – OMB emphasises automation and the use‚ of‚ machine -readable data‚ to speed up reporting, reduce‚ agency‚ burden,‚ and improve‚ outcomes.

The specifics of which are in the Memorandum sent to the heads of Executive Departments and Federal Agencies.

Ted Dziekanowski Jason Spezzano Brian McCarthy

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact‚ #aws‚ #dhs‚ #cisa‚ #securitiesandexchangecommission‚ #doj‚ #falseclaimsact‚ #cmmc

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6874632449918320640