An interesting draft for the security of medical devices published by the Food and Drug Administration (FDA), that sets out a comprehensive approach to securing medical devices from the drawing board onwards. Pulling together cybersecurity risk management, cybersecurity framework profiles,…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
The CISA website has plenty of CSF profiles and an implementation guide for CSF profiles for the Defence Industry Base (DIB). CSF profiles are required by FISMA (and the DoD – DoDi 8510.01) and implemented by the SEC. I wonder…
I started my career many years ago working in what we now call AI, developing Knowledge Based Systems (KBS/ KBE) for complex manufacturing processes in the Aerospace and Defence sector. It helped me understand the models we created were only…
Thank you for sharing Ted Dziekanowski, yet another example of a regulator focusing down on cybersecurity risk management. With Israel’s Capital Market, Insurance and Savings Authority (CMISA) issuing 2 circulars focusing on risk management and cybersecurity risk management across covered…
This week the Securities and Exchange Commission published its Spring 2022 rule making list. For those interested in cybersecurity and regulation 3235-AN15(proposed), 3235-AN89(final) and 3235-AN08(final) are the regulations to watch. 3235-AN15(proposed) – cybersecurity, is an addition. One expected the final…
Yodel, the delivery company suffered a cyber attack earlier this week that disrupted deliveries across the UK. Deliveries look to be continuing and the disruption managed. #cybersecurity #cybersecurityriskmanagement #governance #cyberattacks View Original Post
The U.S. Government Accountability Office(GAO) has reported again on the issues of cybersecurity on the U.S. economy, and the potential for catastrophic losses in the event of cyber attacks. With cyber insurance and the government backstop for losses from terrorism…
A great summary from the international Law firm Goodwin on the Securities and Exchange Commissions(SEC) cybersecurity risk management proposals for Investment Funds, Advisors and SEC Public registrants. We have been saying for some time that the rules are coming and…
In a development for UK Financial Service third party suppliers, the UK government has published a policy statement for mitigating risks from critical third parties to the finance sector (FS), such as cloud service providers. HM Treasury has been working…
