As cybersecurity legislation evolves across US Federal government and regulatory enforcement regimes start to take effect, cyber insurers have an opportunity to educate their clients on cybersecurity and risk management. To support the insured manage the risk. Cyber insurers are…
Great post Brian McCarthy on Cyber Supply Chain Risk Management (C-SCRM). Bringing together US Executive Orders, Manufacturing CSF profiles and cyber security. Ted Dziekanowski Jason Spezzano #criticalinfrastructure‚Â #CSF‚Â #CISA‚Â #CMMC‚Â #cybergovernance‚Â #cybersecurity‚Â #cyberriskmanagement View Original Post
An important step forward for US cybersecurity regulation this week. On the 1st March the Senate unanimously passed the ‘Strengthening American Cybersecurity Act of 2022’, including FISMA 2022. A package of three cybersecurity bills sponsored by Sen.‚Â Gary Peters‚Â (D-Mich.) and now…
Thanks for posting Ted Dziekanowski. It’s a great video for companies wishing to understand cybersecurity compliance for manufacturing. Describing the benefits of using the CSF profile for manufacturing, its alignment with NIST SP 800-171 and closing the gaps between 171…
The US DoD aims to support its DIB manage supply chain risk, with concerns over the supply of components for weapons systems, such as rare earth elements and microelectronics. The DoD plans to release supply chain risk management (SCRM) policy…
Companies that are going through the M&A process make a very attractive target for cyber attacks. Hackers have the flexibility to target companies that are in the acquisition process, that are very lucrative targets, once they are acquired by PE…
More is now known about the cyber attack on Kojima Industries, that supplies Toyota. The attack has impacted Toyota, Hino and Daihatsu that rely on Kojima and represents an example of a cyber attack within the supply chain of a…
Does this set the breadth and depth of ESG compliance, oversight, assurance? #theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #defence‚Â #defense‚Â #esg #esgrisk #esgrating View Original Post
The figures in the enclosed report are a concern. If the average IT security spend per employee (maybe the best measure we have today) has remained flat for the past 6 years, its a good indicator that we are not…
In normal times FUD (Fear Uncertainty and Doubt) does not work to make change in the board room, but one suggests we are not in normal times. There are plenty of reports from US government agencies including CISA, DHS and…
