I spoke to AFCEA London on the 4th of November on changes to US cyber regulation, legislation and enforcement.

← Back to Blog

I spoke to AFCEA London on the 4th of November on changes to US cyber regulation, legislation and enforcement. What they mean to the UK and European Defence Industry Base (DIB) and the impact they could have on the complex relationship between defence agencies, DIB contractors, regulatory enforcement and combat mission objectives. The event was attended by the UK defence industry and the Ministry of Defence (MoD). The presentation is enclosed.

There was plenty to discuss. The cyber regulatory and legislative process is moving quickly in the US, impacting Federal, State, Local and Tribal government. The DoD confirmed its intentions to move ahead with its CMMC program and NIST SP 800-171/ 172 on the 4th November. Enforcing cybersecurity compliance across its global DIB in-line with DFARS 252.204-7012, 7019 and 7020. FISMA and the adoption of the Risk Management Framework (NIST SP 800-37R2) is a requirement for Federal Agencies and is being updated through legislation. The US passed the Infrastructure Bill on the 5th of November that provides the DHS and CISA with funding to oversight cybersecurity compliance and incident reporting across Federal agencies and contractors. The Securities and Exchange Commission (SEC) is planning cyber risk governance legislation. We discussed cyber regulatory enforcement and The Department of Justice (DoJ) civil fraud initiative using the False Claims Act (FCA), and the Department of Treasury (DoT) focus on Ransomware enforcement through OFAC. All programmes that require cybersecurity and risk management compliance and will impact companies trading with the US.

We discussed these changes. The impact they will have on the European and UK DIB and Ministry of Defence(MoD), and considerations for compliance.

Please reach out if you have any questions and communicate the message.

Ted Dziekanowski‚ Brian McCarthy‚ Jason Spezzano

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact‚ #afcea‚ #afceacyber‚ #aws #afceatechnet #afcea

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6863381328335798272