The SEC Whistleblower program pays between 10 and 30 percent of the money collected from fines. Between this weeks proposal relating to cyber-risk management by the SEC and the DoJs civil cyber fraud initiative the SECs whistleblower program adds board…
Yesterdays announcement by the SEC for mandatory cybersecurity disclosure will set the cyber risk management agenda for SEC covered entities, if passed. Not only does it propose mandatory ongoing disclosures by covered entities of their governance, risk management, and strategy with…
A very interesting and recommended read for those following yesterdays SEC announcement proposing cybersecurity risk management, strategy, governance and incident disclosure for covered entities. This FISMA report evaluates the SECs own compliance to information security program, practices, and NIST SP…
Great post Brian McCarthy on Cyber Supply Chain Risk Management (C-SCRM). Bringing together US Executive Orders, Manufacturing CSF profiles and cyber security. Ted Dziekanowski Jason Spezzano #criticalinfrastructure‚Â #CSF‚Â #CISA‚Â #CMMC‚Â #cybergovernance‚Â #cybersecurity‚Â #cyberriskmanagement View Original Post
An important step forward for US cybersecurity regulation this week. On the 1st March the Senate unanimously passed the ‘Strengthening American Cybersecurity Act of 2022’, including FISMA 2022. A package of three cybersecurity bills sponsored by Sen.‚Â Gary Peters‚Â (D-Mich.) and now…
Thanks for posting Ted Dziekanowski. It’s a great video for companies wishing to understand cybersecurity compliance for manufacturing. Describing the benefits of using the CSF profile for manufacturing, its alignment with NIST SP 800-171 and closing the gaps between 171…
The US DoD aims to support its DIB manage supply chain risk, with concerns over the supply of components for weapons systems, such as rare earth elements and microelectronics. The DoD plans to release supply chain risk management (SCRM) policy…
Moving left is more than a strategic shift, it’s an organisational, governance, cultural, risk and strategic shift. It requires the delivery of a proactive approach to cybersecurity risk management. Software development and the SDLC is one small component of the…
Some quick wins to protect an organisation from cyber-attacks, as organisations focus on making cyber a business risk management activity. The asymmetric threat will rise as sanction come into force and their affect is felt in Russia. Ted Dziekanowski View…
In these difficult times this paper is a very good read. Written by Chris Inglis and Harry Krejsa. Cybersecurity needs a significant re-think in todays cyberspace. For a long time cybersecurity has focused on the ‘bang’ (the cyber-attack) and ‘what’s…
