Federal cybersecurity gets off the starting blocks as the $1trn Infrastructure Bill gets passed. The bill provides funding that includes cyber for agencies including DHS and CISA. Passing the bill now allows for time on other legislation that includes cyber,…
Never let it be said cybersecurity is not a profitable business. Its just not profitable for the companies. With M&A and stock based compensation being a probable cause for the possess. Crowdstrike is an interesting example reporting losses totalling $375…
They came, they saw, they caught some sun, kicked back, kicked ass. The brits won. #ransomware‚Â #fisma‚Â #ofac‚Â #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #fca‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #falseclaimsact‚Â #afcea‚Â #afceacyber‚Â #aws View Original Post
The DoD has issued CMMC 2.0. Cybersecurity is a necessary requirement for the Defence Industry Base without a doubt. CMMC 2.0 will need some clarification. CMMC Level 3 will be aligned with NIST SP 800-172 and Level 2 NIST SP…
We published the Augusta plan 1.0 () in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of Cybersecurity and Supply Chain Risk Management (C-SCRM). Using existing regulated and qualified resources for the international oversight…
FedRAMP has finally release version 1.0 of NISTS OSCAL (Open Security Controls Assessment Language). This is an important first step in the documentation and automation of controls. It is key to clear controls inheritance and the implementation of the shared…
As the former Global head of Santander’s 2nd Line of Defence for Cyber risk, this regulation is one to watch. The US cyber regulatory agenda is moving at pace across Federal Government, with international impact. The Federal Trade Commission ()…
For those in the cyber community, most will not have heard about OFAC, so this is an interesting read from Eversheds. With over 600 suspicious activity reports filed in the first half of 2021, a 30% increase on the whole…
AWS looks to be aligning its cloud security to CyberSecurity Framework Profiles (CSF), following a October 2021 update of its CSF policy. Providing a level of global flexibility between alternate frameworks such as ISO/ IEC 27001, NIST SP 800 –…
On the 4th of November I am speaking to the AFCEA (the Armed Forces Communications and Electronics Association) London Chapter, discussing the developing cybersecurity and risk management legislative agenda in the US, and existing cyber regulations that could impact on…
