Call us now:
An interesting article on cyber security, compliance and risk management. Historically there has been a lack of cyber, a growing amount of data and a distinct lack of based risk based regulation, outside of Financial Services. With risk related compliance embedded in regulations like Article 32 of GDPR or the NYDFS cyber regulations focused on Financial Services.
The CMMC is one of the first cyber regulations which in my opinion has been developed in support of the need to manage cyber risk. The FISMA of 2002 and 2014 were created to modernise Information Security within US Federal Government and feed the DoD Risk Management Framework (RMF). Which is being used by the DoD to make risk based decision (e.g. DODI 8510.01) on its IT for weapons systems and procurement decisions. In my view with the help of a few GAO reports drive the CMMC programme, as the means by which the DoD expects to manage cyber security risks within its supply chain. Enforcing the management of NIST and CMMC controls as part of an inherent, controls and residual risk assessment process.
Thoughts anyone.
#cyberrisk #cyber #insurance #cyberinsurance #parava #europe #supplychain #cybersecurity #cyberrisk #cyber #cyberdefense #procurement #security #cmmccoe
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6760522746402226176