The unfortunate consequence of a cyber attack. As United Structures of America, a $100million turnover business employing 450 people files for bankruptcy following a cyber attack initiated in 2019. An example if one were needed of the impact of ransomware,…
An interesting read on the changing landscape of cyber incident response. As organisation in the US are increasing reaching for their external legal councel before the incident response team to manage an incident. The regulatory and legal implications of a…
Following yesterdays House Oversight and Reform committee hearing on updating FISMA (2022). I have enclosed a paper that outlines the importance of FISMA and the Office of Management and Budgets OMB-A130 regulation. That have are foundations of US Federal Cyber…
The enclosed committee hearing(11.01.2022) is important to watch. For those that do not know about the Federal Information Security Modernization Act 2014 (2002), it is foundation regulation that forms part of the US approach to cyber security. It was last…
I’m pleased to announce that the Augusta Group with 327 Solutions are running seminars in 2022 on US cyber regulation and legislation. Starting next month we will be discussing the changing US legislative landscape as it related to cyber and…
There’s been allot of talk about CMMC over recent weeks and months and its impact on the Defence Industry Base (DIB). But CMMC only focused on the cybersecurity requirements of the Department of Defence. To date the primary cyber regulation…
For those looking to understand the history of DFARS, NIST SP 800-171 and CMMC. As it has been applied by the DoD then the enclosed GAO report is a must read document. Published in December 2021 by the US Governments…
The US is moving forward quickly to address the challenges that cybersecurity and its low levels of cyber maturity bring. Challenges that it is not alone in facing and in all likely hood is more advanced than many Western nations…
Leading out of the starting blocks into 2022 I have a question. ‘Is cyber a risk that can be insured today without a radical rethink of the oversight and assurance of cyber risk management by the cyber insurance industry?’ In…
A possible Nation State hack in March 2021 against the the UK’s Ministry of Defence Defence Academy, was more significant than reported at the time. Successfully attacking the MoDs University, a facility that appears to be inside a wider MoD…
