Over the past 2 months we have seen the DoD move toward the adoption of the Cybersecurity Framework (CSF) for the Defense Industry Base, as part of the DoD DIB cyber strategy, and clearer oversight of their implementation of the…
The U.S DoD announced that it needs to test, reuse and reciprocate cybersecurity risk as required under the DoD’s adoption of the RMF, and DoDi 8510.01. One wonders how the DoD and DIB will react to the testing of the…
With the DoD moving towards the RMF and CSF, we at Veritas GRC felt the enclosed papers and video are important. We wrote several papers in 2021 on the adoption of the RMF, DoD 8510.01 and DoDi 5000.90 that are…
Yesterday Ron Ross posted about cybersecurity and, what is in ones opinion the foundation of U.S cyber regulation, OMB A-130. The foundation that has driven FISMA, that allows for the adoption of the Cybersecurity Framework profile as a tool for…
Thank you Brian D. McCarthy for providing the enclosed. The DoD issued a deviation to the current DFARS 252.204-7012 updating NIST compliance to NIST SP 800-171 R2. It is unclear how many defense contractors are required to comply with DFAR…
Cybersecurity is the flavor of the month: A very important update from U.S security services to the Senate. We’re on day 3 of the month and at least 3 committees have started to lift the lid on cybersecuirty. Be that…
The CEO of United Health sat in front of 2 committees yesterday to discuss the impact of the cyber attack, that started in February 2024. Both events are enclosed (). The sentiment of both committees was that the United Health…
The American Hospital Association (AHA) has reported that almost all U.S Hospitals were hurt financially by the United Health, Change Healthcare cyber attack this year. ‘The AHA said that 94% of hospitals reported damage to cash flow and more than…
UK and Australian export laws do not meet the standards expected by the U.S under the AUKUS partnership. Whose success requires the integration of disparate industrial, regulatory, security and trade frameworks, as well as development, production and fielding of high-tech…
The U.S DoD has worked out that Defense in Depth is the right way to go to secure its networks, and that the CISA strategy of Continuous Diagnostic Mitigation () has to be implemented. @Thaddeus Dziekanowski, the DoD is also…
