Call us now:
Audit reports are not always the most riveting of reads, but I have to say this report is. Not because it’s about U.S Nuclear Cyber compliance but because it starts with OMB A130 and FISMA as the foundation for U.S cybersecurity regulation. That form a regulatory basis for U.S Federal Agency cyber risk management.
The conclusions drawn by the audit are important. They focus on building the foundations of cybersecurity risk management and the adoption of cyber risk management by the NNSA and oversight of its contractors; the audit can be applied to all Federal agencies; cybersecurity risk management is the regulatory paradigm being adopted by global regulators and it sets the baseline standards for cybersecurity controls required to manage cyber risk; FISMA through the RMF supports a tailored control baseline from NIST SP 800-53 and CSF profiles, a profile written for the U.S Nuclear industry with CISA; The audit can be applied to all Federal Agencies. The report also highlights the important role of audit in the oversight, assurance and attestation of cyber. (Note how many times NIST SP 800-37 is mentioned)
If you would like to know more Ted Dziekanowski and I wrote a paper on the importance of FISMA and OMB in 2021 ‘The regulatory cyber-risk elephant in the room impacting the management of cybersecurity’ (https://lnkd.in/dVdM3ZRq). There are plenty of tools in the cyber tool kit, they just need implementing.
#cyberriskmanagement #fisma #governance #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6981510021285040128