Call us now:
Do as I say, and as I do. EU cyber regulation laying down measures for a high common level of cybersecurity at the institutions, bodies, offices and agencies of the Union entered into force on the 7th January 2024. https://lnkd.in/eueJ9DrB
The EU is taking a proactive and cohesive approach to cybersecurity risk management across its member states. By 8 April 2025, each Union entity shall, after carrying out an initial cybersecurity review, such as an audit, establish an internal cybersecurity risk-management, governance and control framework (the ‘Framework’). The establishment of the Framework shall be overseen by and under the responsibility of the Union entity’s highest level of management.
In short EU entities are required to implement an RMF, governance process and appropriate cyber risk oversight and assurance. An approach that has been adopted by EU regulation including NIS 2 and DORA and U.S regulations such as the SEC final rule.
As one sometimes puts it for the SEC final rule and its compliance to FISMA. The EU is putting in place the governance and frameworks, demonstrating that it ‘eats its own dog food’ and can manage its own cybersecurity risks. Building the foundations for cyber, ahead of requiring others to do the same.
By the end of Quarter 1 2024, Veritas GRC will have a formal draft program that addresses the design, implementation, oversight and assurance of appropriate and adequate Cybersecurity Risk Management compliance, for entities covered under the SEC final rule, EU NIS 2 and DORA. Based on some of our existing work (www.augustagrp.com). Work that establishes governance, oversight and assurance of cyber risk management, in line with existing standards for cybersecurity and risk management.
Ted Dziekanowski Brian D. McCarthy Rich Waite, M.Ed. George Sawyer
Veritas GRC
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7150422065139908608