Damned if you do, damned if you don’t. Imagine that you have been ransomwared, all your business data is locked down and you don’t have the keys. You may have the option to pay the hackers who have kindly locked…
Thanks for sharing John Weiler CMMC-CoE, TBM, Agile Acquisition. It is very useful for those of us outside of the US to be able to see what is happening in its legislative space. As cyber legislation develops globally, predominantly in…
You don’t have to work for the company to whistle blow, as $1.8Mn is awarded by the SEC to a company outsider following a successful regulatory action. It strengthens the point that breaches in regulation can be identified and reported…
Data security is a complex and critically important issue for national security and economic prosperity. The UKs economy is service orientated, quite simply we cut much less metal than we used to. We are heavily reliant on the 1s and…
DFARS rule changes and CMMC cyber standards are leaving the starting gate. Now that it is moving forward and is likely over the next 4 years to be embedded into the US defence supply chain. Questions are being asked about…
An important read if you are interested in cyber regulation and supply chain security. CMMC has been on the radar for many months and with the release last week of the interim ruling and the ‘Unpublished’ release yesterday by the…
Skunk works on Steroids: This is one to watch if you are in cyber, procurement and manufacturing. As the US DoD has taken a new approach to the design, development and testing of its defence systems. In this case, it…
I have made several comments on the SEC whistleblower programme over the past months. The SEC has moved further to strength the programme, one which it sees as an important tool in the governance and oversight of its covered entities.…
Thanks for sharing this Kris Carter, it is interesting that the review request for the 17.09 release was an emergency one. Maybe adding a little speed to its release? With clarity around its release, putting pressure on the DoD supply…
For those of us in the security profession there is plenty of cross over between cyber security control frameworks, be that ISO or NIST and other regulatory requirements. SoX has from its inception focused on Access to Programmes and Data…
