A likely outcome of the SEC consolidating its crypto and cyber enforcement teams and increasing its size may well be a robust pipeline of work. One wonders Ted Dziekanowski if the combination of a robust well tested whistleblower program alongside…
U.S army is moving forward with the Risk management Framework 2.0, under FISMA. This is important for those companies that wish to deal with the DoD, as risk management become an integral part of defence procurement and supply and mission.…
A thought for Sunday. Our Personal physical and logical security is important to all of us, on one side we want privacy on the other we need security. Our Governments are obligated to provide security at a national level through…
We presented a proposal to the DoD, Cyberspace Solarium Commission, NDIA and AICPA in 2021 to manage DFARS and CMMC compliance. We called it the Augusta Plan 1.0, or Augusta Plan 2.0 to enable CMMC, FISMA and OMB A130 compliance.…
A great read providing a comprehensive view on how NATOs role in Cybersecurity has developed since it became a domain of operation and what the future role could look like. For example NATO setting up its own cyber command; greater…
Are Europe and NATO heading for a cyber compliance tsunami? With the amount of US defense hardware heading into Europe, what will be the impact on the European Defense Industry and compliance to US DoD DFARS and CMMC regulations for…
Many are commenting on the SECs requirements to report material incidents in 4 days, or for CNI providers to report incidents to CISA in 3 days. US financial services regulators expect cyber incidents to be reported to their banking organization’s…
Who will carry more weight across the Defense Industry Base, the DoD or the SEC? If the SEC proposal that focuses on cybersecurity risk management, strategy, governance and incident disclosure moves ahead. What will be the impact on DoD Primes,…
An important report on the state of UK cybersecurity and actions that UK firms need to take to implement cybersecurity. The UK and EU is heading towards a cyber standards and regulatory problem, that is being driven by the US…
Cyber insurers could potentially be looking at large claims due to the Ukraine-Russia war. While ‘some’ cyber insurance precedents have been set recently following the Merck Not Petya hack, it may not be enough to prevent claims disputes between the…
