Last week the U.S DoD issued its Defense Industry Base (DIB) cybersecurity strategy. It makes for an interesting read and raises many questions for defense contactors and highlights the complexity of cybersecurity risk management between the DoD and DIB. The…
Last week the DoD released its cyber strategy for the Defense Industry base (DIB). The strategy days little that is not already known, but raises many questions namely why now? The DoD has been covered by Federal Cybersecurity requirements under…
On the 27th of March the Belgium Parliaments Commission on Interior Affairs approved a draft law for NIS 2 (EU 2022/ 2055). The bill aims to fully replace the EU NIS 1 Directive in Belgium and forms part of Belgium’s…
Is the DoD just skirting around the edges of cybersecurity risk management? The DoD has all the tools it needs to enforce cybersecurity risk management across the DIB, its just chosen not to enforce them. DFARS 252.204-7012 has been in…
Imagine for one moment last weeks Baltimore ship incident was due to a cyber attack. Then the answer to the question in the enclosed article is ‘Yes it is possible’. The cyber attack on UnitedHealth and Change Healthcare, has cost…
Now there’s the pot calling the kettle black. Why does one feel that we get side stepped with every move that is made? @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity #cyberriskmanagement #nationalsecurity View Original Post
No matter if it’s the SEC Final Cyber Rule, EU NIS 2 or DORA boards are required to demonstrate their oversight, assurance and to attest cybersecurity risks. Material or otherwise. That requires robust governance over cybersecurity risk management. No single…
The numbers are so large, are we simply numb to the fact that our personal data cannot and is not secure? @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity ##cyberriskmanagement #cyberattack View Original Post
Building board governance for cybersecurity risk management regulatory compliance, through the 3 Lines of Defence. As recognised by the Bank of Internal Settlements. Veritas GRC View Original Post
Cybersecurity in the public sector is a thankless task, even more so for mission critical systems such as nuclear. The November 2023 alleged hack against Sellafield was denied by many. Yet the UK governments nuclear regulator is pressing charges against…
