An interesting report from Lloyds of London, highlighting the role of cyber security across the logical-physical divide in the context of Geopolitical events. It examines the potential impact on claims through scenario planning. It has some baring on recent events,…
An interesting article from McKinsey (just hit my in-box) on targeted recruitment to address the shortage in cybersecurity talent and reduce cybersecurity risk. With developments in cybersecurity risk management legislation ‘left of bang’, such as EU NIS 2.0, DORA and…
Rheine-based frozen food manufacturer Apetito has been severely impacted by a cyber attack. The attack has affect deliveries and the companies ability to contact customers. Impacting the UK business and deliveries this week. () #cybersecurity #supplychainriskmanagement #cybersupplychainriskmanagement View Original Post…
Cyber insurance brokers are finding it very difficult on the front line. Premium prices are up, coverage is down and there is more scrutiny of controls. Loss rations have dropped slightly with the increase in premiums, indicating insures are still…
An interesting draft for the security of medical devices published by the Food and Drug Administration (FDA), that sets out a comprehensive approach to securing medical devices from the drawing board onwards. Pulling together cybersecurity risk management, cybersecurity framework profiles,…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
The CISA website has plenty of CSF profiles and an implementation guide for CSF profiles for the Defence Industry Base (DIB). CSF profiles are required by FISMA (and the DoD – DoDi 8510.01) and implemented by the SEC. I wonder…
Ted Dziekanowski DFARS 252.204-7012 says that organisations that use cloud must be equivalent to FEDRAMP moderate and those that use cloud computing services that are part of an Information Technology service or system operated on behalf of the Government must…
I started my career many years ago working in what we now call AI, developing Knowledge Based Systems (KBS/ KBE) for complex manufacturing processes in the Aerospace and Defence sector. It helped me understand the models we created were only…
In my view the DoD is laying the ground work for the CMMC program. Reaffirming DFARS clause 252.204-7012, the implementation of NIST SP 800-171 at a minimum, and the penalties for non compliance. Penalties that Include withholding progress payments; foregoing…
