Ted Dziekanowski DFARS 252.204-7012 says that organisations that use cloud must be equivalent to FEDRAMP moderate and those that use cloud computing services that are part of an Information Technology service or system operated on behalf of the Government must…
I started my career many years ago working in what we now call AI, developing Knowledge Based Systems (KBS/ KBE) for complex manufacturing processes in the Aerospace and Defence sector. It helped me understand the models we created were only…
In my view the DoD is laying the ground work for the CMMC program. Reaffirming DFARS clause 252.204-7012, the implementation of NIST SP 800-171 at a minimum, and the penalties for non compliance. Penalties that Include withholding progress payments; foregoing…
One step at a time for U.S. DoD DIB contractors. As the DoD publishes a memo reminding contracting officers to enforce penalties for contractors that fail to comply with DFARS clause 252.204-7012 Ted Dziekanowski. That alongside DFARS 252.204-7019 and DFARS…
For those that can get to this article from the Wall Street Journal it is well worth reading. It discuses the challenges ahead for the funding of cyber tech across Series A, B and C and cross over funding. With…
One wonder’s if there’s ever a good time to lose $100Million in crypto currency? U.S. crypto currency firm Harmony appears to have done just that, following an attack on its ‘bridge’. An addition to the reported $1Billion of crypto in…
Thank you for sharing Ted Dziekanowski, yet another example of a regulator focusing down on cybersecurity risk management. With Israel’s Capital Market, Insurance and Savings Authority (CMISA) issuing 2 circulars focusing on risk management and cybersecurity risk management across covered…
SEC commissioner Peirce raises concerns about the depth and breadth of the SECs rule making agenda and whether it is overstepping the remit of the regulator. Protecting professional investors over retail investors. One wonders in some instances you have to…
This week the Securities and Exchange Commission published its Spring 2022 rule making list. For those interested in cybersecurity and regulation 3235-AN15(proposed), 3235-AN89(final) and 3235-AN08(final) are the regulations to watch. 3235-AN15(proposed) – cybersecurity, is an addition. One expected the final…
The U.S. Government Accountability Office(GAO) has reported again on the issues of cybersecurity on the U.S. economy, and the potential for catastrophic losses in the event of cyber attacks. With cyber insurance and the government backstop for losses from terrorism…
