I have enclosed a document which is well worth a read, specifically Part 252.204.7012 (Safeguarding Covered Defence Information and Cyber Incident Reporting), page 10, as it forms a foundation for CMMC. There are couple of observations, which I would like…
Given the past record of alleged state interventions in election processes. Why would I be surprised at this? But the report comes on the back of an announcement that Cozy Bear are targeting US and UK COVID 19 research. With…
Cyber is without doubt an enterprise wide risk. Our use of data supports his, the impact of cyber attacks on financial statements proves this and depth and breadth of cyber controls defines this. Business’s are dependent upon technology and digital…
Free introductory video we have created to help communicate the US DoDs CMMC programme. The CMMC (Cyber Maturity Model Certification) programme is progressing despite COVID 19. If the programme proceeds as planned it will strengthen existing requirements to protect Federal…
They say that it’s a good idea to change the passwords and if possible your user ID on a regular basis. If this article is correct, then it is likely that the User IDs and Password of a significant number…
The SECs Office of Compliance Inspections and Examinations (OCIE) issued a risk alert to all participants in financial service markets, specially focusing on ransomware. Recommending that organisations pay attention to alerts from the Department of Homeland Security Cybersecurity and Infrastructure…
Well worth a read. If all goes to plan the US DoD programme for embedding cyber security into its supply chain will start this year. If successful for the US DoD, CMMC will deliver a more or less turn key…
Having a sovereign cyber security capability is becoming a necessity and the norm for counties. Defining the level of cyber security a state needs to manage itself and what it is willing to outsource to the corporate sector, is a…
The legislative path for CMMC won’t become clear until requirements enter DFARS at some point in 2020 or maybe early 2021. Until then the programme continues through its planning to develop training materials, assessor guides and accreditation processes. Whether or…
According to US security services MSPs are being increasingly targeted by hackers. Who use MSP services to ‘springboard’ into the networks of their customer. With the increased use of MSP services it can be easier for a hacker to target…
