The US Government Accountability Office (GAO) has issued its assessment of the CMMC program, required under the 2021 NDAA. It’s a synopsis of the history and current state of the CMMC program, highlighting concerns raised by industry and the challenges…
The Department of Justice(DoJ) is moving ahead at pace with its civil fraud initiative against government contractors that fail to comply with cybersecurity requirements. That include information security standards and cyber incident reporting obligations (DFARS 7012) and supply chain procurement…
In October this year the Department of Justice (DoJ) announced that it was putting in place a Civil Fraud initiative to enforce the False Claims Act (FCA). With a focus on organisations that fail to comply with cybersecurity standards required…
The U.S. Department of Homeland Security, Transportation Security Administration‚Â (TSA) agency last week issued security directives that implement new cybersecurity requirements on the‚Â US passenger rail‚Â and‚Â high-risk freight rail‚Â sectors. Owners and operators are required to: 1. Designate a cybersecurity coordinator 2. Report to…
The SEC has adopted rules under Sarbanes Oxley requiring the PCAOB to inspect third party auditors of firms that issue securities in the US. Allowing closer inspection of audit firms, their jurisdiction and ownership. A example where the US is…
It is a pleasure to be included in the INTERNATIONAL SECURITY JOURNAL (ISJ) list of influencers for the 2nd year running. Some of my predictions for 2021 were close, such as increased cyber legislation, regulation and supply chain security. For…
A very nice synopsis of the impact of cyber as it moves from IT to OT systems and the transition from a logical to physical problem. Both for insurance companies and industry. Demonstrating the challenges for insurance companies and silent…
Three smaller bi-Partisan bills that include cyber make there way through Congress this week. The Understanding Cybersecurity of Mobile Networks Act, was approved by a vote of 404-19. The bill would require the National Telecommunications and Information Administration (NTIA) to…
T-Mobile North America shareholders have launched a Derivative class action lawsuit on its board of directors following the August 2020 cyber breach. The attacked levied a fine of $92m from the Federal Communications Commission (FCC). The complaint is that defendants…
It may not be of surprise that cloud infrastructure is as, if not more vulnerable than on prem. Ted Dziekanowski Jason Spezzano Brian McCarthy #ransomware‚Â #fisma‚Â #ofac‚Â #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #fca‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #falseclaimsact‚Â #aws‚Â #dhs‚Â #cisa‚Â #appgai‚Â #securitiesandexchangecommission View Original Post
