The Capital One hack of 2019 rumbles on, as the company agrees to pay $190 Million to settle a class-action law suit. Whilst denying liability, both Capital One and AWS agree to settle to save time. ¢â‚¬Å“While Capital One and…
The US is moving towards bringing a global, common, understanding and perspective of cyber. As the US has had a year of unprecedented change in cyber, following several attacks on Critical National Infrastructure. 2 Executive Orders focusing on Supply Chain…
If the US is playing catch-up, forging ahead with a robust legislative and regulatory enforcement regime in 2021 and 2022 to close gaps. How far behind are other Western governments? #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #dhs‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #cisa‚Â #governance‚Â #nist‚Â #nist800171‚Â #nist80053‚Â #cui‚Â #fedramp View Original Post
For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
Another cyber Bill makes its way through Senate approval. A further example of cybersecurity legislation pushing forward towards regulation, aiming to speed up the process of cloud service adoption by US Federal Agencies. FedRAMP is an important certification for Federal…
A great example of how critical national industries are adapting their cybersecurity posture as US Banking Industry Associations and Finance Institutions update their cybersecurity framework profile, in line with the NIST CSF (). The work is a very comprehensive update…
With our dependency on digital and tech, chip manufacturing has to be the most important national capability. Is Europe’s lack of chip manufacturing capacity going to create a significant security risk in the not to distant future? With the US…
Could Gartner’s 2020 prediction that the impact of cyber-attacks on physical infrastructure through OT, with the loss of human life start be correct? As cyber legislation and corporate actions gains pace for example shareholder suits for failing to protect shareholder…
If you are going to read anything this week, read this. With amendments proposed to NDAA 2022 for FISMA 2021, FISMA is on the legislative and regulatory radar. There have been amendments made to FISMA 2014 by OMB, under Executive…
The US Government Accountability Office (GAO) has issued its assessment of the CMMC program, required under the 2021 NDAA. It’s a synopsis of the history and current state of the CMMC program, highlighting concerns raised by industry and the challenges…
