This is definitely one to watch. It is the start of cybersecurity policy for space systems, as the US President signs the Space Policy Directive 5 (SPD5). Setting out the key principles for cybersecurity for space systems. Another example of…
Several representative bodies for academic and research institutions in the US have written to the Under Secretary of Defense for Acquisition and Sustainment (USD[A&S]). Raising concerns over the implementation of CMMC and its financial impact on academic institutions during COVID…
Cyber security is an important topic for discussion in 2021. The Senate and the House Armed Services Committee has set an agenda for discussion of CMMC in 2021. CMMC is one component of the drive in the US for Supply…
Cybersecurity Maturity Model Certification (CMMC). It won’t be long before the draft DFARS text for the CMMC programme is released for public consultation. Whilst no one knows what it will say, the MoU between the Department of Defence and the…
CMMC CoE and Parava sign MoU View Original Post
A very interesting read. I would say that there is a different culture to whistle blowing in the US than in most other countries. There is a tendency to reward whistleblowers out of the funds received from fines from successful…
A great article from HBR, highlighting what boards need to do in setting the cyber risk agenda. Building cyber governance, audit, risk assessment and the need to focus to outcomes such as the risk appetite, customer, shareholder and regulatory expectations.…
One to watch. Regulators are taking direct action against companies who fail to take reasonable steps to apply cyber security controls. As the Australian Securities and Investments Commission (ASIC) taking financial advice company RI Group to the Federal Court for…
Are we seeing a rise in ATM cashouts. CISA released an advisory last week () of increased FASTCash attacks targeting banks, by North Korean hackers. In what appears to be a very profitable programme, netting around $2bn since 2015 Morocos…
Well worth a read. When what you don’t know or cannot prove may kill you, or at the very least hurt? There are plenty of data protection and cyber regulations out there, granted allot are US based. But they do…
