US natural gas supplier Superior Plus is a victim of a ransomware attack. A example of an infrastructure supplier that suppliers gas to the US and Canada, suffering from a system outage. But following on from the Colonial attack earlier…
The 2022 NDAA may not have picked up as much cyber legislation as many hoped. But adding legislation into the defence bill has not stopped cyber legislation moving forward in the US. The Department of Homeland Security(DHS) has a commanding…
A small but meaningful fine of $1.5M by the SEC as it settle charges against GWFS Equities, Inc. (GWFS) for failure to file Suspicious Activity Report (SAR) following a recent cyber event. This enforcement action is the first of its…
SEC Commissionaire comments on the SEC Chairs regulatory agenda. Raising concerns that the current legislative and regulatory book of work is not as progressive as they would like. Cyber Risk Governance remains in the Fall 2021 calendar. Ted Dziekanowski Jason…
An article that is worth reading, an interview with Sir Jeremy Fleming, head of GCHQ by the FT on cyber, digital and digital currency. Is there recognition that the fast paced and dynamic nature of cyberspace requires global digital standards?…
With our dependency on digital and tech, chip manufacturing has to be the most important national capability. Is Europe’s lack of chip manufacturing capacity going to create a significant security risk in the not to distant future? With the US…
Could Gartner’s 2020 prediction that the impact of cyber-attacks on physical infrastructure through OT, with the loss of human life start be correct? As cyber legislation and corporate actions gains pace for example shareholder suits for failing to protect shareholder…
If you are going to read anything this week, read this. With amendments proposed to NDAA 2022 for FISMA 2021, FISMA is on the legislative and regulatory radar. There have been amendments made to FISMA 2014 by OMB, under Executive…
The US Government Accountability Office (GAO) has issued its assessment of the CMMC program, required under the 2021 NDAA. It’s a synopsis of the history and current state of the CMMC program, highlighting concerns raised by industry and the challenges…
The Department of Justice(DoJ) is moving ahead at pace with its civil fraud initiative against government contractors that fail to comply with cybersecurity requirements. That include information security standards and cyber incident reporting obligations (DFARS 7012) and supply chain procurement…
