FedRAMP has finally release version 1.0 of NISTS OSCAL (Open Security Controls Assessment Language). This is an important first step in the documentation and automation of controls. It is key to clear controls inheritance and the implementation of the shared…
As the former Global head of Santander’s 2nd Line of Defence for Cyber risk, this regulation is one to watch. The US cyber regulatory agenda is moving at pace across Federal Government, with international impact. The Federal Trade Commission ()…
For those in the cyber community, most will not have heard about OFAC, so this is an interesting read from Eversheds. With over 600 suspicious activity reports filed in the first half of 2021, a 30% increase on the whole…
AWS looks to be aligning its cloud security to CyberSecurity Framework Profiles (CSF), following a October 2021 update of its CSF policy. Providing a level of global flexibility between alternate frameworks such as ISO/ IEC 27001, NIST SP 800 –…
On the 4th of November I am speaking to the AFCEA (the Armed Forces Communications and Electronics Association) London Chapter, discussing the developing cybersecurity and risk management legislative agenda in the US, and existing cyber regulations that could impact on…
A balanced view of cybersecurity and a good read by SEC Commissionaire Elad Roisman to the Los Angeles County Bar Association on cybersecurity and meeting the meeting emerging challenge. Highlighting the challenges organisations face with managing cybersecurity and meeting their…
The DoDs CIO confirmed to the Senate Armed Service’s Committee that the CMMC needs to reflect concerns of small business, while Senator Tom Tuberville reiterates the impact of cyber on R&D and small businesses, with $116bn expected to be spent…
The corporate balance sheet is under substantial pressure from cyber, it is probably the most complex and expensive non-financial risk in todays the board room and a risk being regulated by Federal Government. Cyber security and risk management are inextricably…
CMMC is up in the air at the moment pending DoD and Federal government oversight. DFARS and NIST compliance for Defence contractors who have signed contracts and should flow down DFARS 252.204-7012 is not. DFARS 7012 has been a commercial…
A bit of light reading. But a demonstration of how seriously the US is taking international relations, cybersecurity and digital. Legislation is passing through Congress that gives authority to the US State Department and makes cybersecurity a core priority. With…
