It’s a very difficult square to make a circle out of with competing agendas, requirements and the protection of national interest. How do small firms who maybe required to adhere to a cyber standard as comprehensive as NIST SP 800…
Having the right number of formal assessors is going to be important for the CMMC programme. But its not an insurmountable ask, it’s a game of capacity and numbers. Albeit training 2,000 people to assess is one thing, having 2,000…
Capcom has released an update on its recent hack and ransomeware attack. With recent news of attacks purportedly against Ubisoft and Cryteck and the release of the next PS5 and XBOX Series X. Are hackers trying to cash in before…
Its been a week where the European Union and the UK governments have introduced proposals which restrict the sale of companies and products in the interest of national security and human rights. The UK Government has introduced a bill which…
CREST International signed a Memorandum of Understanding (MoU) with the CMMC Center of Excellence (CMMC-CoE). Bringing together CREST an organisation which provides international accreditations for technical security and professional certifications, and the CMMC – CoE who is building a partner…
On the 3rd of November 2020 myself, Rear Admiral William Chase, and John Weiler were invited to speak to the UK All-Party Parliamentary Group on cyber security (APPG – ). Briefing the working group on several cyber security topics including…
Are we going to see changes in cyber security following the results of the US election? Maybe, but maybe not quickly. There will probably be other more pressing priorities for the new administration to focus on. Its going to take…
Cyber attacks impact the top and bottom line, lost revenues, remediation costs, brand and reputational damage and legal costs. Don’t expect cyber insurance to cover everything. This HBR article makes the point that only 3% of the the global impact…
The US federal government and the DoD have been moving ahead, at pace, making changes to improve supply chain security. Be that through the article 889 of the National Defense Authorization Act or the more recent release of the DoDs…
A dog which had plenty of bark, but in the end not allot of bite. When GDPR finally came into force in 2018, there was great fan fair of the potential fines which could be imposed for failing to abide…
