Great post Brian McCarthy on Cyber Supply Chain Risk Management (C-SCRM). Bringing together US Executive Orders, Manufacturing CSF profiles and cyber security. Ted Dziekanowski Jason Spezzano #criticalinfrastructure‚Â #CSF‚Â #CISA‚Â #CMMC‚Â #cybergovernance‚Â #cybersecurity‚Â #cyberriskmanagement View Original Post
Thanks for posting Ted Dziekanowski. It’s a great video for companies wishing to understand cybersecurity compliance for manufacturing. Describing the benefits of using the CSF profile for manufacturing, its alignment with NIST SP 800-171 and closing the gaps between 171…
With our dependency on digital and tech, chip manufacturing has to be the most important national capability. Is Europe’s lack of chip manufacturing capacity going to create a significant security risk in the not to distant future? With the US…
Could Gartner’s 2020 prediction that the impact of cyber-attacks on physical infrastructure through OT, with the loss of human life start be correct? As cyber legislation and corporate actions gains pace for example shareholder suits for failing to protect shareholder…
If you are going to read anything this week, read this. With amendments proposed to NDAA 2022 for FISMA 2021, FISMA is on the legislative and regulatory radar. There have been amendments made to FISMA 2014 by OMB, under Executive…
The US Government Accountability Office (GAO) has issued its assessment of the CMMC program, required under the 2021 NDAA. It’s a synopsis of the history and current state of the CMMC program, highlighting concerns raised by industry and the challenges…
I am looking forward to joining the stage with Jerry Leishman on the 16th of November to discuss How Changing U.S. Department of Defense Cybersecurity Requirements Affect U.S. & U.K. Companies. The US regulatory environment is developing quickly. DFARS 252.204-7012,…
Thanks for sharing this Regan Edens and to all the other members of the CMMC Standards working group. As a Brit getting recognised in the delivery of this is a privilege. I’ve worked with some great people and we all…
Does the recent hack of Federal Systems tell us anything about cyber security maturity? As more information becomes available about the recent hack of Federal systems the size, scale and ingenuity of the hack is becoming clearer. There is as…
Having the right number of formal assessors is going to be important for the CMMC programme. But its not an insurmountable ask, it’s a game of capacity and numbers. Albeit training 2,000 people to assess is one thing, having 2,000…
