We’re creating AI that is not secure. It’s not a surprise that we are not securing AI as we find it challenging to secure no-AI products and services. Innovation and security have not always been good bed fellows and AI…
Is the SEC starting to rack up legal wins that demonstrates its authority to regulate crypto currency. “The SEC just keeps winning,†said John Reed Stark, a former agency attorney and prominent crypto critic. “The law is catching up.†With…
Is the knowledge gap between the CISO and board improving despite cyber regulation being a priority for some companies in the U.S and EU. There is a need for board education to improve members understanding of cybersecurity, cyber risk, management…
Its taken 4 years over which time Ted and I have been working together on cybersecurity risk management. From the our origins of the U.S DoD CMMC program, the Augusta Group and Veritas GRC we have never met. We finally…
Yesterday Ron Ross posted about cybersecurity and, what is in ones opinion the foundation of U.S cyber regulation, OMB A-130. The foundation that has driven FISMA, that allows for the adoption of the Cybersecurity Framework profile as a tool for…
Thank you Brian D. McCarthy for providing the enclosed. The DoD issued a deviation to the current DFARS 252.204-7012 updating NIST compliance to NIST SP 800-171 R2. It is unclear how many defense contractors are required to comply with DFAR…
Thank you for posting Brian D. McCarthy, this is an important document for Critical National Infrastructure providers in the U.S. The definition of CNI is very clear. The order addresses the need to ensure that cybersecurity risk management is an…
The conversation in the media is starting to change, as the realization of cybersecurity risk management regulation, regulatory oversight and legal action dawns. The challenge for CISO is not one of cybersecurity, its now one of cybersecurity risk management, regulatory…
OMB A130 is the foundation of U.S cyber regulation such as FISMA – The regulatory elephant in the room the Federal government has never addressed. But maybe the saviour of SEC registrants, and entities covered by EU NIS 2…
The CEO of United Health sat in front of 2 committees yesterday to discuss the impact of the cyber attack, that started in February 2024. Both events are enclosed (). The sentiment of both committees was that the United Health…
