Supply Chain Risk Management (SCRM) and cybersecurity management are ¢â‚¬Å“Front and Center¢â‚¬Â for the US Federal Government.‚ The DoD has been actively working to address deficiencies in the cybersecurity of its Defense Industry Base (DIB) using Defence Federal Acquisition Regulation Supplement…
Following on from the release of the GAO report on the challenges cyber insurance policy holders face earlier this month. Whilst central to government policy Congressman Jim Langevin, a co-chair of the Cybersecurity Solarium Commission makes the point that during…
The US takes action against Russian following the recent cyber attacks. View Original Post
There are lessons to be learnt from managing legacy equipment. Mandiant identified the threat actor behind the cyberattack and data theft involving Accellions legacy File Transfer Appliance product. Which has been associated with the ransomware reported by Bombardier this week…
The European Commission presented a new Cybersecurity Strategy in December 2020. The Strategy has three pillars: 1. Resilience, technological sovereignty and leadership – Reforming the rules on the security of network and information systems. Creating a network of Security Operations…
The US builds a considerable team to work on cyber security. but one critic is that it is heavily biased toward public sector appointment with little commercial sector experience. Balancing public and private sector experience will be important to ensure…
Where will National Supply Chain Security and SolarWinds sit with the new US administration? The 2020 Hack linked to breaches in SolarWinds source code has exposed significant deficiencies in Federal Cyber Security. With Microsoft highlighting that the sophistication of the…
The SECs Office of Compliance Inspections and Examinations (OCIE) issued a risk alert to all participants in financial service markets, specially focusing on ransomware. Recommending that organisations pay attention to alerts from the Department of Homeland Security Cybersecurity and Infrastructure…
Thanks for sharing Jerry, it brings home the costs of non-compliance and the figures are significant. Someone has to pay for it somewhere, usually the consumer. CMMC is an opportunity to embed cyber security best practice into the supply chain.…
A good article, are we using the wrong baselines to assess cyber risks, maybe so? The big challenge with cyber risk management is how do you know what good looks like. What to measure and how to measure it to…
