Following yesterdays House Oversight and Reform committee hearing on updating FISMA (2022).

← Back to Blog

Following yesterdays House Oversight and Reform committee hearing on updating FISMA (2022). I have enclosed a paper that outlines the importance of FISMA and the Office of Management and Budgets OMB-A130 regulation. That have are foundations of US Federal Cyber since 2002 and are going through a significant update. That can be found on our website (https://lnkd.in/dVdM3ZRq)

Cybersecurity and cyber risk management are front and centre for US government legislation and regulatory enforcement. FIMSA has required Federal Agencies to adopt a risk based approach to information security and cyber since 2002, that they have failed to adhere to (GAO reports). FISMA reform with other regulatory changes will place pressure on Federal agencies and their ‘contractors’ to implement cyber risk management and may place DHS and CISA in the driving seat for Federal cyber oversight and assurance.

We discuss the adoption of FISMA by the DoD across its branches and procurement processes under DoDi 8510.01 and DoDi 5000.90; the role FISMA plays with CMMC as the mechanism to be adopted in line with risk mitigation through DFARS 252.204-7012 and NIST SP 800-171; the implications of the adoption of FISMA by Federal contractors and subcontractors that no doubt will be used by the DoJ as a regulation to apply enforcement action.

Ted Dziekanowski Brian McCarthy Jason Spezzano

#theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #digitalcurrency‚ #sec‚ #cyberriskgovernance‚ #securitiesandexchangecommission‚ #ransomeware‚ #csfprofiles‚ #dhs‚ #governance‚ #nist‚ #cyberinsurance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6886936755916824576