Last week the US Congress moved a step closer to implementing cybersecurity across the whole of Federal government, as it signed the 2021/2022

← Back to Blog

Last week the US Congress moved a step closer to implementing cybersecurity across the whole of Federal government, as it signed the 2021/2022 Infrastructure Investment and Jobs Act. A rather innocuous sounding Act, yet one that will have a significant impact on US Federal cybersecurity and their contractors and subcontractors.

Outlining areas for Federal funding of cybersecurity for Critical National Infrastructure agencies and requirements for cyber incident reporting, improvements to State and Local cybersecurity, cybersecurity assessments, resourcing and reporting. Putting DHS and CISA in a commanding position to oversight and assure cybersecurity and the development of cyber-risk management strategy across Federal Government.

Alongside other proposed legislation such as FISMA 2021 that modifies existing cyber-risk management regulation to include cyber incident reporting. In addition to a proposed Cyber Incident Reporting Act, requiring critical infrastructure owners and operators to report cyber-attacks to the Cybersecurity and Infrastructure Security Agency (CISA) under the DHS.

Cyber legislation is developing quickly in the US. Existing regulations and proposed legislation will impact those organisations that trade with the US. As Cyber – Supply Chain Risk Management (C – SCRM) becomes a regulated enforceable requirement for Federal, State, Local and Tribal government.

Ted Dziekanowski‚ Brian McCarthy‚ Jason Spezzano

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact‚ #afcea‚ #afceacyber‚ #aws #dhs

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6863745601079664640

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags