The US DoJ Civil Cyber Initiative is having a sluggish start, but a start all the same. One often wonders whether it is more a case of too many opportunities to choose from, not enough qualified staff, or balancing national…
Well worth a read for those companies affected by EU NIS 2 and DORA across the 27 EU Member states, and those contemplating cyber regulation. The 2025 ENISA Threat Landscape report lays out the top cyber threats faced by the…
The UK government is between a big rock and a hard place with the JLR cyber attack. On one side, why should it bail out a private sector company with rich parents? On the other hand, UK jobs and UK…
CMMC-covered DoD defence contractors have had since 2017 to comply with DFARS 252.204-7012, self-attesting compliance. Submitting their NIST 800-171 compliance scores to the DoD Supplier Performance Risk System (SPRS), mandated by DFARS 252.204-7019. We have seen several DFARS 252.204-7012 compliance…
The effects of the JLR hack are being felt by those in its supply chain. It appears JLR had no insurance, and its cybersecurity did not contain the incident. The effect of which has affected its employees, those of its…
There’s a conundrum for Internal Audit, on one hand, cybersecurity remains at the top of the risk list for internal audit is cybersecurity. On the other internal audit should be reassured that cyber regulation is increasingly being applied by regulators…
Positive to see the United States Department of War proactively moving ahead with the management of cybersecurity across the weapon systems procurement, design, and manufacture. The current approaches to deliver the RMF, in line with the Federal Information Security Modernisation…
Lauren Nazer, it was a pleasure to discuss cybersecurity and the role and effect of US DoD Cybersecurity Regulation on the UK defence Industry with you and industry colleagues. This weekend’s attack on Collins Aerospace demonstrates the effect of cyber…
One cannot agree more. The past 3 years has taught us the impact of cyber and technology failures on CNI. United Health, Crowdstrike, the Iberian power incident, compromised Inverters in solar farms, Collins, US Congression panels on nation state threats…
Theres alot to be said about market forces, a lack of focus on defensive cybersecurity and in ones opinion the need to regulate cybersecurity risk management. Michael R. View Original Post
