Cyber risk has been consistently identified as the most significant risk most industries face. The WEF 2025 global risk report maintains cyber risk within the top 5, 2 year, global risks (one loves figure D, Global risk landscape: An Interconnected…
It’s a week of cyber updates from the US. The DoD, GSA and NASA will issue a proposed update to U.S Federal Acquisition Regulation (FAR) to the Federal Register on the 15.01.25.The update is important. The rule proposes to apply…
The release by the DoD IG of its evaluation of the DoDs process for authorising 3rd Party Organisations performing CMMC assessment is an interesting read. Highlighting the effects of not securing CUI across the DIB that could weaken national security,…
One always has to look back at OMB A-130, FISMA and the important of securing Federal information. A requirement that has been in place for many years and managed under FISMA. Requirements underpinned by NIST RMF and cyber standards.@Thaddeus Dziekanowski…
The problem we face with cybersecurity risk management is frequency, complexity and severity of impact. An issue that has grown by orders of magnitude over the past 14 years and that shows no signs of slowing down. With solutions proposed…
It follows that the reporting of incidents by all UK businesses, both public and private sector is required. Least of all, it’s embedded in cyber regulations of our partner nations.Banning of payment of ransomware may not be such a good…
The UK needs a cyber strategy if it is going to be in a position to secure its CNI. It needs to focus on how it manages cybersecurity of defense. The latest round of cyber supply chain strategy from the…
It is very easy to think that cyber is a FUD debate. In 2024 numerous presentations were made to congress by head of U.S security services over the concerns of nation state attacks and pre-positioning inside U.S CNI.How does the…
The White House today published curbs on the export of Artificial Intelligence Chips. Aimed at strengthening U.S. security and economic strength. In effect brining in restriction on the access to AI chips to those with ‘Universal Verified End User†(UVEU)…
One is not sure how concerned one should be that the UK is building foundations to improve its economy by the use of AI. Or the fact that the UK has no data or cyber strategy. Both pre-requisites for the…
