I am looking forward to speaking at AFCEA (the Armed Forces Communications and Electronics Association) on the 4th November.

← Back to Blog

I am looking forward to speaking at AFCEA (the Armed Forces Communications and Electronics Association) on the 4th November. Discussing the developing cybersecurity and risk management legislative agenda in the US, and existing regulations that could impact on the UK, EU and trade.

Cybersecurity legislation is developing rapidly in the US. 2 Executive Order have been signed in 2021 focusing on Supply Chain Risk Management (14017) and the nations cybersecurity (14208). Draft legislation to update FISMA (2021), and the Cyber Incident Reporting Act (2021) were introduced in October. Various cyber related regulations are on statute including FISMA (2002/ 2014) requiring Federal Agencies to implement the Risk management Framework (RMF), DFARS 252.204-7021 (2017) requires defence contractors and subcontractors to implement the NIST SP 800 – 171 cyber standard. DFARS updates were introduced in November 2020 requiring DoD contractors and subcontractors to provide NIST 171 scores to the DoD before contract award, and setting expectations for DoD oversight. Recent meetings at NATO and the Quad Leaders Summit set out agendas to develop common cybersecurity standards.

With other enforcement regimes also announced this month the cyber ‘stick’ in the US seems to be getting bigger than the ‘carrot’ in 2021. A stick that may have financial and regulatory implications.

Ted Dziekanowski‚ Brian McCarthy‚ Jason Spezzano

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6854673356839514112