The DoW CMMC program only added a layer of compliance assurance over cybersecurity compliance under DFARS 7012 and NIST 171, and all the recent announcements by the DoW on CMMC Phase II does is remove certification. It does nothing to…
One was pleased to see that the U.S National Association of Corporate Directors (NACD) published their ‘Directors Handbook on Cyber-Risk Oversight’ last week. Recognizing the need for corporate boards to adopt a 3 Line of Defence (LoD) Model for the…
Could this be an indication that U.S Federal Agencies are focusing on the adoption of NIST SP 800-171 cybersecurity compliance for the fulfillment of federal contracts? In this instance Federal Emergency Management Agency (FEMA), Department of Homeland Security (DHS) will…
For any organization considering the Securities and Exchange Commissions(SEC) Proposal for Cybersecurity Risk management, that maybe released in H1 2023. The enclosed audit by the SEC Office of the Inspector General of the SECs 2022 compliance to FISMA 2014 is…
If you are a contractor or subcontractors in the Global Defense Industry, especially colleagues outside of the U.S that are covered under DFARS 252.204-7012, 7019 and 7020. The enclosed webinar being given by Rachel V. Rose, JD, MBA is worth…
Thank you Stephen Pitt-Walker, JD, FGIA, this is a further demonstration of the challenges that companies face with cybersecurity compliance. A lack of qualified and experienced resources, developments in cybersecurity risk management regulation and a low level of maturity for…
The EU has made significant efforts to regulate cybersecurity. Its approach has been to create a connected suite of regulations that compliment each other. Yet can be applied independently across industry sectors for example EU NIS references the CRA and…
Australia aims to be the most cybersecure country by 2030. The next challenge it faces, as with all countries, is delivery. Australia has moved quickly with cyber regulation to address the need for unified cyber compliance. It has standards defined…
A great read that raises some interesting questions about nation state cybersecurity capabilities. Certainly it raises the questions about how nation states aim to achieve a meaningful level of cybersecurity capability that is both offensive and defensive, and the different…
Interest rates up, inflation up, cyber attack complexity, frequency, severity, and complexity up, cyber opportunities up. But cyber needs to offer solutions to problems, not products. Whether we like it or not regulation and compliance is coming. Regulators are unlikely…
