Three smaller bi-Partisan bills that include cyber make there way through Congress this week. The Understanding Cybersecurity of Mobile Networks Act, was approved by a vote of 404-19. The bill would require the National Telecommunications and Information Administration (NTIA) to…
Many nations are playing political catch-up on cybersecurity and the UK is no exception. Cybersecurity is recognised by NATO as a domain of operation alongside conventional warfighting domains. Cybersecurity and cyber-risk management requires a balanced, agile and appropriate offensive and…
The appropriate risk management framework, that includes identification, qualification, mitigation and reporting is important to convey the state of cyber-risk management to the board. The US first published the Federal Information Security Modernization Act (FISMA) in 2002, updated in 2014…
DHS appears to be in the driving seat for Federal Cyber Security enabling CISA to provide the necessary oversight and assurance. DHS and CISA are adopters of CSF profiles, that provide greater flexibility that other cybersecurity frameworks. As discussed on…
Last week the US Congress moved a step closer to implementing cybersecurity across the whole of Federal government, as it signed the 2021/2022 Infrastructure Investment and Jobs Act. A rather innocuous sounding Act, yet one that will have a significant…
This article is a great read if you want to understand the impact of the SECs ESG regime and its impact on balancing the legal relationships between buyers and sellers. ESG is an issue for supply chains and an issue…
We published the Augusta plan 1.0 () in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of Cybersecurity and Supply Chain Risk Management (C-SCRM). Using existing regulated and qualified resources for the international oversight…
As the former Global head of Santander’s 2nd Line of Defence for Cyber risk, this regulation is one to watch. The US cyber regulatory agenda is moving at pace across Federal Government, with international impact. The Federal Trade Commission ()…
On the 4th of November I am speaking to the AFCEA (the Armed Forces Communications and Electronics Association) London Chapter, discussing the developing cybersecurity and risk management legislative agenda in the US, and existing cyber regulations that could impact on…
The US government overwhelmingly passed a bill requiring covered software suppliers to the Department of Homeland Security (DHS) submit a Software Bill of Materials (BoM) and certification that their products are free from vulnerabilities and defects. The DHS Software Supply…
