The DoDs CMMC timeline is starting to firm up. The recent memo to DoD procurement officers has reaffirmed the need to assess SPRS submissions ahead of existing contracture obligations under DFARS 252.204-7012, 7019 and 7020 and the penalties for non-conformance.…
In this quarter’s Security Institute magazine I discuss the changes that forthcoming cybersecuriry legislation will have on U.S, EU and UK companies. Driven by regulators pushing cybersecurity ‘left of bang’. Addressing failures in cybersecurity compliance and pushing cyber into the…
A data breach from California’s Department of justice Firearms Dashboard portal occurred this week. It Exposed the personal information individuals who were granted or denied a concealed and carry weapons (CCW) permit between 2011-2021. The hack came at a time when the…
A skill shortage that will only get worst before it gets better. U.S. and EU legislation, regulation and enforcement programs that are on statute or in the pipeline are going to increase the burden on organisations across all sectors. Raising…
An interesting report from Lloyds of London, highlighting the role of cyber security across the logical-physical divide in the context of Geopolitical events. It examines the potential impact on claims through scenario planning. It has some baring on recent events,…
An interesting article from McKinsey (just hit my in-box) on targeted recruitment to address the shortage in cybersecurity talent and reduce cybersecurity risk. With developments in cybersecurity risk management legislation ‘left of bang’, such as EU NIS 2.0, DORA and…
Rheine-based frozen food manufacturer Apetito has been severely impacted by a cyber attack. The attack has affect deliveries and the companies ability to contact customers. Impacting the UK business and deliveries this week. () #cybersecurity #supplychainriskmanagement #cybersupplychainriskmanagement View Original Post…
Cyber insurance brokers are finding it very difficult on the front line. Premium prices are up, coverage is down and there is more scrutiny of controls. Loss rations have dropped slightly with the increase in premiums, indicating insures are still…
An interesting draft for the security of medical devices published by the Food and Drug Administration (FDA), that sets out a comprehensive approach to securing medical devices from the drawing board onwards. Pulling together cybersecurity risk management, cybersecurity framework profiles,…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
