If you’re in CNI, this is worth a read. The US GAO released a report last week, following an assessment of the ‘Oversight of cyber security across high risk chemical facilities’. Covered by the Chemical Facility Anti-Terrorism Standards (CFATS) program,…
Elexon a company which you have probably never heard of. An important component in the UKs electricity market, has reported it has been hacked. Elexon acts an a clearing house for payments between electricity generators, transmission and suppliers (those that…
Capital, equity markets and insurers rely on an independent assessment of an organisation’s performance. Provided through, amongst other things credit rating agencies, financial updates and market reports, and Q&A of control performance. To price-in cyber risk and for insurers to…
Simply brilliant, it’s what sets our British bobbies and front line security professionals apart from all others. I can see him in his basque and stockings already……Broadway calls? View Original Post
Well worth a read. The US Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defence (DoD) today ‘outed’ North Korea. Releasing 3 further Malware Analysis Reports (MARs) which it believes are being…
Whilst the original DoD proposal for CMMC was aimed at all suppliers. The CMMC won’t apply to companies which solely produce Commercial Of The Self (COTs) products. According to recent website changes. The next question, what counts as a COTs…
The US Department of Defence (DoD) is deploying a NIST (and DFARS) based standard through its Cybersecurity Maturity Model Certification (CMMC) programme. Their supply chain has over 300,000+ companies across its Defence Industry Base(DIB), extending globally. Whether you make boots…
GoDaddy announced this week that it identified a security breach on the 23rd of April, which may have occurred in October 2019. The breach targeted hosting account credentials, and whilst there’s no information on the number of account impacted, GoDaddy…
A great article and summary of the more recent observations on CMMC, addressing the direction of travel for accreditation and opportunities for CMMC outside of defence contracts. CMMC is DFARS and NIST based and adhering to cyber security best practice…
CMMC is being driven forward by the US DoD as the standard for Cyber Security oversight and assurance across it’s Defence Industry Base (DIB). With between 300,000 and 350,000 companies in the supply chain, ranging from SMEs up to large…
