Back in 2021 we wrote about the use of FISMA, OMB A130 and the RMF as tools adopted by the DoD and DIB for the security of Defense IP. We updated these with other standards and frameworks, and…
The management of defense IP is critical to the national security of any nation. Especially when you spend over $700 billion on defense, some of which goes on the development of the next generation of weapon systems. With cyber a…
Citi is to pay $135.6m in penalties for making insufficient progress towards resolving data quality, risk management and internal control issues, highlighted in a 2020 consent order. The penalty bought by the Office of the Comptroller of the Currency and…
Fragmentation of U.S cyber regulations is driving legislation to create an interagency committee tasked with streamlining the countries cybersecurity regulations. Senators Gary Peters and James Lankford have put forward the bi-partisan Streamlining Federal Cybersecurity Regulations Act (). Calling on the…
There little precedence for what the Supreme Court Ruling against the Chevron Deference will bring. This article provides an informative view of what may or may not occur. How Federal Agencies may have started to prepare in advance of the…
Should we be concerned, ransomware attacks are getting more complex? If a threat actor can access you data for ransom, they can all access your data to damage it, or destroy infrastructure. @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity…
Thank you Andrew Alston. The 2023 Parliamentary report says much about the UKs cyber posture, the governments response was intriguing. Furthermore the UK government was mentioned in a 2022/2023 Congressional draft National Defense Authorization Act; raising concerns over its management…
@Thaddeus Dziekanowski, as you have discussed many, many times. Unless you address cybersecurity over AI, you cannot guarantee the provenance of AI. You cannot guarantee AI models do not hallucinate or do not get poisoned. Least of all, if you…
We have seen first hand the development of a hybrid war between Russia and Ukraine. One that has led to a dramatic increase in cyberattacks against organisations globally. While we discuss the threat of a ‘new axis of power’ and…
Olaf Classen, one would argue that the role of the CISO is quite well defined. More so as cyber regulation takes effect across covered firms. It maybe that CISOs have not yet evaluated what they should do to support their…
