Call us now:
An article that raises the issues the DoD continues to have with cybersecurity, while being required to manage and report cyber through successive NDAAs and successive governments.
The U.S DoD and other security agencies have reported significant issues with cybersecurity over the past 6 months. Identifying the lengths that nation state threat actors will go to compromise U.S defense infrastructure. There have been many documented reporting requirements highlighted in NDAAs over several years, where congress expects reports on the security of mission critical assets. Reports that one can assume have been delivered, yet security is still a difficult challenge to meet.
‘Most recently, Section 1505 of the Fiscal Year 2022 NDAA requires the DoD chief information officer to address cybersecurity readiness this November by documenting the department’s ability to secure its mission-critical assets and operational infrastructure against defined standards and objectives to protect CS/OT assets.’
One wonders if U.S politicians are moving on from reporting to wanting actionable delivery. However for the DoD cyber delivery seems to come in big bangs (Zero trust), when demonstratable incremental delivery, oversight and assurance is required. By way of example the U.S DoD DFARS program, required to secure the DoD Defense industry Base, is 6 years old and does not oversight the DIB. Leaving other Federal Agencies and regulators to enforce cyber regulation on the private sector. The cyber ball is running away and gaining momentum and it needs slowing down if there is going to be any chance of protecting national security. Cyber isn’t kinetic warfare the same rules do not apply, for one we all hold a weapon at our finger tips, its called an digitally enabled computer.
Ted Dziekanowski Brian D. McCarthy Bob Dix
#cybersecurity #cyberriskmanagement #dod #defense
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7114866821576450049