Call us now:
America first, maybe, good practice most certainly. As we start to see the emergence of cybersecurity regulation passed by US Law makers.The Federal Contractor Cybersecurity Vulnerability Reduction Act passed through the house this week. A bill that would require covered contractors with the federal government to implement vulnerability disclosure policies (VDPs) that are consistent with National Institute of Standards and Technology guidelines.The bill directs OMB, CISA, the National Cyber Director, and NIST to review FAR and update requirements to ensure that covered contractors implement a vulnerability disclosure policy consistent with NIST guidelines for contractors as required under section 5 of the IoT Cybersecurity Improvement Act of 2020.In short if you sell an information system to a federal agency the contractor will be required to have a vulnerability disclosure policy and program.There are similarities with the EUs approach for cybersecurity vulnerability management under the Cybersecurity Resilience Act (CRA). The CRA requires products sold and distribute in the EU with digitial elements, to implement and manage cybersecurity from product design through end of life.The Act demonstrates bi-partisan support for cybersecurity regulation in the US. Least of all the protection of Federal agencies from cybersecurity vulnerabilities from third party suppliers.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanOffice of the National Cyber Director, The White House Cybersecurity and Infrastructure Security Agency United States Department of DefenseVeritas GRC#cybersecurity #cyberriskmanagment #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7303687553121964032