Could the convergence of CMMC 2.0 and last weeks proposal by the SEC for cybersecurity risk management, strategy, governance and incident disclosure be the mechanism to kick start cybersecurity across the US global DIB? Previous attempts by the DoD to…
This advisory from the US Cybersecurity Infrastructure Security Agency makes it abundantly clear that all sides have to be careful about escalating a cyberwar. Russian actors are already inside networks and one can only assume the same is true for…
Are we holding onto a knife edge that maybe starting to cut our fingers, as all sides in the Ukrainian war appear to steer clear of using cyberwarfare. If we’re all in each others networks it’s in no ones interest…
Germanies Federal Office for Information Security (BSI) is recommending that Russian information technology business could be a source of both information and a platform for cyber attacks and they should be replaced. The BSI recommends Kaspersky anti-virus products are replaced with alternatives…
The Israeli cyber authority reported yesterday DDoS attacks on government websites, in what may have been retaliation. A defense establishment source claims that this is the largest-ever cyberattack carried out against Israel View Original Post
Supply chains are an ideal opportunity for disruption during these challenging economic and social times. Cyber Supply Chain Risk Management (C-SCRM) is a challenge for many manufactures, its expensive to implement and there is a lack of resources across industry…
The German business unit of Denso reported a cyber attack last week. It is the second confirmed cyber incident of a supplier to Toyota in the past month. While there are no report of disruption to Toyota production, one suspects…
An interesting question Ted Dziekanowski. If the SEC presses ahead with cybersecurity risk management proposals as indicated, what will be the impact on public defense contractors in the case of DoD DFARS regulations? With the potential of having to report…
An important read for those following US cybersecurity risk management and regulatory enforcement. The US Department Of Justice (DoJ) announced the first resolution under its Civil Cyber-Fraud initiative using the False Claims Act (FCA). Investigated by State Department OIG and…
Does the cyber insurance market need more money to underwrite cyber risk exposure? Alongside the additional capital companies need to cover the gap between inherent risk and the shortfall in cyber insurance coverage. Cyber insurance is struggling to cover the…
