We published the Augusta plan 1.0 () in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of Cybersecurity and Supply Chain Risk Management (C-SCRM). Using existing regulated and qualified resources for the international oversight…
FedRAMP has finally release version 1.0 of NISTS OSCAL (Open Security Controls Assessment Language). This is an important first step in the documentation and automation of controls. It is key to clear controls inheritance and the implementation of the shared…
As the former Global head of Santander’s 2nd Line of Defence for Cyber risk, this regulation is one to watch. The US cyber regulatory agenda is moving at pace across Federal Government, with international impact. The Federal Trade Commission ()…
For those in the cyber community, most will not have heard about OFAC, so this is an interesting read from Eversheds. With over 600 suspicious activity reports filed in the first half of 2021, a 30% increase on the whole…
AWS looks to be aligning its cloud security to CyberSecurity Framework Profiles (CSF), following a October 2021 update of its CSF policy. Providing a level of global flexibility between alternate frameworks such as ISO/ IEC 27001, NIST SP 800 –…
On the 4th of November I am speaking to the AFCEA (the Armed Forces Communications and Electronics Association) London Chapter, discussing the developing cybersecurity and risk management legislative agenda in the US, and existing cyber regulations that could impact on…
