One impact of regulation is that those being regulated will find a way. In this case ESG regulation has led to a re-allocation of funds claiming to be ESG compliant. That may not have been as compliant as fund managers…
Worth a read, NIST has published a draft revision to NIST SP 800-53, looking for comments. The revision looks to improve control oversight and assurance. 1. Improve the efficiency of conducting control assessments. 2. Provide better traceability between assessment procedures…
Well worth reading. The GAO has published a report at the end of July which they issued earlier in the year (March) on cyber security and IT across Federal agencies. Highlighting the need to make improvements in cyber and address…
The Australian Government has launched a public consultation aiming for regulatory reforms to increase investment in business cybersecurity. Including setting clear cyber minimum security expectations; increased transparency and disclosure; and protecting consumer rights. The proposals set a clear direction for…
Thanks for sharing this Regan Edens and to all the other members of the CMMC Standards working group. As a Brit getting recognised in the delivery of this is a privilege. I’ve worked with some great people and we all…
Remember where the term computer bug is reported to come from, well. How about a new term for a shut down of a nuclear reactor, we will call it the ‘spray and prey’…¢â‚¬Â¦clean the reactor room and prey that nuclear…
Critical National Infrastructure (CNI) Operations Technology, specifically Industrial Control Systems, gets focus under a Whitehouse memorandum. To encourage and facilitate the deployment of technologies and systems that provide threat visibility and cyber response for CNI. Expanding the deployment of cyber…
The UK is not alone, we are all slowly coming to terms with the fact that cyber is a systemic risk. One which has the potential to touch many aspects of our lives, including national security. What is our defensive…
The enclosed from the DoD Defence Logistics Agency (DLA) may have implications if you are a supplier to the DoD and require export controlled technical data which is CUI for procurement opportunities. The CMMC interim final ruling was passed in…
Cyber regulation is being developed at a faster rate than at any other time. With the Securities and Exchange Commission (SEC) releasing its Environment Society and Governance (ESG) regime, including cyber risk governance in its 2021 regulatory agenda. The US…
