The UK Government has £880k (excluding VAT) to spend on proposals to help reduce cyber risk across defense. I have a proposal for the MoD to manage cyber risk. 1. Oversight and implement DFARS 252.204-7012. The DoD cybersecurity standard that…
A cyberattack on a UK defense contractor and the theft of sensitive physical security data is of concern. A cyber attack on the UK could be grounds to invoke NATO article 5, but who wants mutually assured destruction? Cyber attacks…
It was a pleasure to present to over 1,400 attendees of the U.S The Institute of Internal Auditors Inc. webinar ‘Preparing for new SEC Cyber Disclosure’ yesterday, with my co-presenter Rachel V. Rose, JD, MBA, hosted by Michael Downing. We…
Japan’s cybersecurity agency suffers a cyber attack, that is believed to have been originated by Chinese hackers. The month long breach comes at a time when questions are being raised over Japans ability to protect itself from cyber attacks. Demonstrated…
Thank you Rachel V. Rose, JD, MBA for sharing. This is an important announcement for U.S Federal Contractors by U.S Rep. Nancy Mace (R-S.C.), chairwoman of the House Oversight and Accountability Committee’s cybersecurity, information technology and government innovation subcommittee. Who…
Great to see you discussing the SEC Final Ruling Brian Walker as the debate around the ruling grows, and the role of corporate governance, the 3 line of defense and requirements for management oversight, assurance and attestation develop. Ted Dziekanowski…
The Canadian government is one of the first national governments to move ahead a program to safeguard the Government of Canada’s unclassified contractual information held on defence suppliers’ networks, systems, and applications. In line with the existing and proposed U.S…
NIST is moving forward with its assessment of public comments for NIST SP 800-171 and revision to R3. A document that is influential for covered defense contractor compliance to DFARS 252.204-7012. It also provides one foundation for what could be…
Corporate America is concerned about the timing of the SEC cyber ruling. While the timely reporting of material cyber incidents is Important. It is by far the least consuming of the rule. Disclosure and management of material cyber risk is…
It should be of no surprise that concerns are now being raise in Washington of the threat IoT devices, and OT technology for that matter pose to security. The recent investigation launched by the U.S Government against Rockwell Automation and…
