Last week the 2022 US National Defence Authorization Act (NDAA) was signed.

← Back to Blog

Last week the 2022 US National Defence Authorization Act (NDAA) was signed. With cyber in mind, there was a little controversy last week as some aspects of cyber were left out, such as cyber incident reporting. But lets not forget there’s plenty of regulation already in place that has not been implemented successfully (FISMA, DFARS) and Federal Agencies including the DoJ and DoT are putting in place cyber enforcement regimes to oversight and assure cyber compliance.

The Act itself is not light on cyber, there’s plenty for the DoD to focus on in 2022 including mission related cyber, cyber governance, cybersecurity of weapon systems, cyber education and cyber resilience to name a few. There’s a review of CUI (Sec 1526) and its implementation by the DoD under its obligations DoDi 5200.48. The NDAA 2022 also includes a review of DoD cyber governance and strategy (Sec 1504).

The Act is uncontroversial, maybe leaving the door open to the DHS in 2022, to take control of Federal Cyber.

Ted Dziekanowski Jason Spezzano Brian McCarthy

#ransomware‚ #fisma‚ #bankingcyber‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #cybercompliance‚ #cybergovernance‚ #dod

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6875749510732144640

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags