Call us now:
At recent Senate Committee meetings (Armed Services, Small Business, Department of Homeland Security), the Quad 4 meeting (24.09.21) and NATO. US representative have raised their concerns over cybersecurity, and the need for international cyber standards. These concerns are resulting in changes in US Cyber regulation, that if passed will not only impact domestic legislation but international trade. The draft 2021/ 2022 NDAA references Cyber – Supply Chain Risk Management (C-SCRM), which at this time maybe an indication of the direction of travel for cyber-risk management across Federal Government in 2022.
Underpinning all these changes are 3 pillars of existing legislation, oversight and standards. FISMA enacted by Congress in 2002, updated in 2014, the Office of Management and Budget (OMB) circular A – 130 and the Risk Management Framework (RMF-NIST SP 800 – 37R2). Mandating all Federal Agencies and their contractors implement the RMF for cybersecurity and cyber-risk management. Senator Portman confirmed on the 23.09.21 that he expects an updated FISMA to be taken to Congress.
The enclosed paper discusses the relationship and importance between FISMA, OMB A – 130 and the RMF. The Cyber-risk regulatory elephant in room, addressing cyber-risk management and C-SCRM for Federal Government and its contractors. The steps the US DoD has taken to meet its regulated obligations, laying the RMF foundations into defence system authorisations (ATO) and procurement processes, and the use of cybersecurity framework profiles.
We contend that regulation exists to implement cybersecurity, cyber-risk management and C-SCRM. Regulation that forms the foundations for Federal government to oversight and assure its domestic and international supply chains.
Thoughts?
Ted Dziekanowski‚Â Brian McCarthy‚Â Jason Spezzano
#theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #cyberinsurance‚Â #insurance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esgrisk‚Â #cyberregulation‚Â #esgreporting‚Â #soc2‚Â #esg
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6849236486370426880