A great example of how cyber awareness is permutating Federal agencies. Data has always been ‘back gold’, the most important asset for governments and organisations, as the DoD recognises. With the theft of DoD weapon system IP. Data creation, theft…
My understanding is that DoDi 8510.01 and DoDi 5000.90 enable the DoD to implement FISMA, the RMF and for a Purchase Officer(PO) to assess risk before an ATO is issued. () That would imply that a PO has the scope…
Thanks for posting Ted Dziekanowski It seems that some U.S and EU regulators are taking a leaf out of the SEC book. Setting regulatory regimes that place the responsibility on boards to implement, assure and attest cybersecurity risk management compliance.…
NIST Cybersecurity Framework Profile (CSF) 2.0 gets underway with a well attended workshop this week, hosted by NIST. Providing an opportunity for the NIST community to come together and discuss the development of the CSF over the past 9 years…
Does the UK have a defensive cyber strategy? The U.S Federal Government is starting to come to terms with the need to secure critical national infrastructure and regulating for it. The EU is adopting EU NIS 2.0 and the Australians…
Ted Dziekanowski Setting common criteria for nation states to agree and authorize common regulatory, cyber and risk standards. That everyone can agree upon and operate across national boundaries. Following a method that has already been created and adopted by several…
An interesting report on the state of the CISO market, primarily in the U.S. Stress and Burnout are still significant issues for CISOs. But changes are starting to take place as CISOs progress towards the board room, as regulation develops…
From earlier this year, Australia moves to implement its next round of cyber legislation. The enclosed article outlines some of the costs associated with the implementation and on going management of the associated risk management programs. ‘Home Affairs Secretary Mike…
Today the UK launched its Maritime security strategy. Cyber gets 53 mentions across the 116 pages. At a time when the EU has released NIS 2.0 that includes maritime as critical national infrastructure, the U.S. has passed cyber regulation to…
An observation from S&P about cyber insurance. Cyber insurance growth (and the likely reduction in loss ratios), is rated more to increases in premiums than volume take up. The article highlights the hesitancy of reinsurers to underwrite large cyber risks.…
