Cyber is a national security problem, it’s a problem that is creating a threat to our way of life. These aren’t my words but those of various heads of security services across the U.S and EU. Many hours of congressional…
Cybersecurity risks are complex risks to manage. It’s complexities reach out across supply chains and one suspects that these complexities are exposed between clients contractors and subcontractors and will flow through contracts and the roles and responsibilities between clients and…
Delivering change is complex and the Big 4 have for many years supported clients deliver transformation programs. But as the FT article demonstrates, transformation has to be both strategically driven and it has to ‘stick’. Here in lies the challenge…
Several CEOs and executives have been called to take the walk to the headmasters office, to discuss cybersecurity recently. One wonders when Congress will evaluate compliance to the many cyber regulations already in place. @Thaddeus Dziekanowski Veritas GRC US Congress…
Brian D. McCarthy and I talk about the Federal Information Security Modernization Act (FISMA), Risk Management Frameworks (RMF) and Cybersecurity Frameworks (CSF), and why they are critical for organisations that are required to comply with U.S and EU cybersecurity risk…
Are we starting to see the DoD address its compliance to FISMA and the adoption of Cybersecurity Frameworks (CSF)? Yesterday Brian D. McCarthy and I unpacked the recent FISMA RMF memo issued by the DoD Deputy Secretary of Defense, the…
If correct the MoD contractor Shared Services Connected Ltd (SSCL) knew about the hack and data breach in February, and won a contract to monitor MoD cybersecurity in April. Why was the company bidding for a cyber contract, when it…
@Thaddeus Dziekanowski, there are plenty of cyber regulations in place in the U.S. For regulation to be successful there needs to be strong enforcement. Secure by design needs regulatory oversight, and corporate assurance and attestation. One suspects the SolarWinds oral…
We’re looking forward to discussing the Cybersecurity Framework 2.0 with Training Camp on the 14th May at 1pm EST. It importance for the implementation of FISMA and the RMF. A presentation that given a little more prominence as the U.S…
The U.S DoD announced that it needs to test, reuse and reciprocate cybersecurity risk as required under the DoD’s adoption of the RMF, and DoDi 8510.01. One wonders how the DoD and DIB will react to the testing of the…
