SME cyber is a problem for all countries and for many reasons. Does cyber need a radical rethink to protect small companies that large companies rely upon across their supply chains and nations rely upon for national security and tax…
To top an interesting week for cyber in the U.S. We’ve had Twitters ex CSO in front of a Senate Judiciary Committee, the Trial of the ex Uber CISO, the White House memo on software supply chain, the Executive Order…
The enclosed Executive Order (EO) on ‘Ensuring Robust Consideration of Evolving National Security Risks by the Committee on Foreign Investment in the United States’ is an important read. It should be read for its impactions on U.S and potentially foreign supply…
Has the White House memo released yesterday requiring Federal departments to ensure that all third-party IT Software deployed adheres to NIST Supply Chain security requirement opened up a whole can of trouble for software vendors that supply Federal Government? ()…
This video with the U.S Pentagons head of acquisition Bill LaPlante focusing on the challenges small suppliers face with supplying the DoD, is worth watching. So many areas covered including resiliency, redundancy, costs, labour shortages, firm fixed price contracting, putting…
I am interested to know how the DoD will evaluate DFARS 252.204-7012 compliance of the international DIB? Will it rely on Prime contractors to evaluate SPRS compliance down their supply chains or expect subcontractors to self attest? View Original Post…
Managing small business cyber is probably the biggest hurdle for governments and corporates to overcome, over 95% of a nations companies are likely SMEs. SMEs provide the products and services for large corporates, underpin a nations GDP and tax income.…
The Office of Management and Budget (OMB) and the Nation Cyber Director (NCD) set out their cybersecurity investment priorities for 2023. It included Zero Trust Implementation, IT Modernization for Federal Cybersecurity by Design, Sector Risk Management Agency (SRMA)Â collaboration, Securing Infrastructure,…
A comprehensive cybersecurity and telecommunications bill has been introduced to Canada Parliament this week, enacting the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national…
In a development for UK Financial Service third party suppliers, the UK government has published a policy statement for mitigating risks from critical third parties to the finance sector (FS), such as cloud service providers. HM Treasury has been working…
