Call us now:
A great read if you are working within the Energy Oil and Gas sector. Many focus on the US DoD and cyber but its not a sector specific issue. By way of example The World Economic Forum (WEF) has created a cyber playbook for Energy Oil and Gas. (https://lnkd.in/drir7qMF)
All industry sectors are different, a one size fits all cyber standard approach to cyber security is unlikely to work. Sectors, their organisations and board rooms need an approach which addresses subjects such as governance, strategy, reporting and risk management, provide cyber oversight and assurance from the board room to the shop floor. Capturing technologies which maybe a higher risk in one sector than another. E.g. OT is not a significant issue for Financial Services, but it is for Oil and Gas.
If and when ESG includes cyber oversight and assurances there will be another cyber regulatory requirement added to board room oversight. Is it time to adopt industry specific Cyber Security Framework profiles, as created by NIST for industry sectors (Manufacturing)? NIST 171 is the cyber standard adopted by DoD procurement, albeit it does not address the board room, missing Governance, risk (RMF), strategy or the Business Environment. It does not yet provide the flexibility to address small business, big business and international oversight and assurance.
Ted Dziekanowski Jason Spezzano Brian McCarthy
#theaugustagroup #theaugustaplan #cybersecurity #SupplyChainRiskManagement #CyberRiskManagement #compliance #cyberinsurance #insurance #regulatorycompliance #regulatoryoversight #esgrisk #cyberregulation #esgreporting #soc2 #defenceindustry #esg #defence
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6832603642294489088