Indian regulators are taking a descriptive approach to cyber incident reporting. Setting a window of 6 hours to report an incident from when it is detected and defining specific categories of cyber incident that should be reported. The new rules…
U.S army is moving forward with the Risk management Framework 2.0, under FISMA. This is important for those companies that wish to deal with the DoD, as risk management become an integral part of defence procurement and supply and mission.…
$1.2 Billion has been issued to whistleblowers by the SEC since its first award in 2012. Ted Dziekanowski #sec #regulation #governance View Original Post
He/she who gets there first maybe the first to set the rules and reap the rewards. Crypto is being regulated by financial markets and banks are well versed in financial trading and financial regulation. View Original Post
A very interesting article on cybersecurity, the False Claims Act and use of whistleblower programs. No public or private organisation, including those outside the U.S. that provide products and services to U.S. Federal agencies, should discount the whistleblower regime. Whistleblower…
Thank you Ted Dziekanowski, the DoJ settlement is an example of the challenges ahead for cybersecurity. The DoJ civil cyber fraud initiative and the enclosed settlement is an example of the regulatory enforcement that is being tested in the US.…
This week sees the Aerojet Rocketdyne case go back to court on the 26th April. In what is seen as a test case for the US Department of Justice (DoJ), and its use of the False Claims Act (FCA) against…
A great article that is well worth reading, bringing together cybersecurity, regulation and litigation. The regulatory landscape for cybersecurity is developing at a rapid rate. The SEC recently released a cybersecurity proposal, the DoD CMMC program requires DFARS compliance, there…
We presented a proposal to the DoD, Cyberspace Solarium Commission, NDIA and AICPA in 2021 to manage DFARS and CMMC compliance. We called it the Augusta Plan 1.0, or Augusta Plan 2.0 to enable CMMC, FISMA and OMB A130 compliance.…
I wonder where the FCA will go with cybersecurity risk management compliance Bryan Foss if the SEC proposal on cybersecurity risk management, strategy, governance and incident disclosure is formalised. It requires boards to disclose corporate cybersecurity risks, their cybersecurity experience,…
