U.S army is moving forward with the Risk management Framework 2.0, under FISMA. This is important for those companies that wish to deal with the DoD, as risk management become an integral part of defence procurement and supply and mission.…
We presented a proposal to the DoD, Cyberspace Solarium Commission, NDIA and AICPA in 2021 to manage DFARS and CMMC compliance. We called it the Augusta Plan 1.0, or Augusta Plan 2.0 to enable CMMC, FISMA and OMB A130 compliance.…
Are Europe and NATO heading for a cyber compliance tsunami? With the amount of US defense hardware heading into Europe, what will be the impact on the European Defense Industry and compliance to US DoD DFARS and CMMC regulations for…
Many are commenting on the SECs requirements to report material incidents in 4 days, or for CNI providers to report incidents to CISA in 3 days. US financial services regulators expect cyber incidents to be reported to their banking organization’s…
Who will carry more weight across the Defense Industry Base, the DoD or the SEC? If the SEC proposal that focuses on cybersecurity risk management, strategy, governance and incident disclosure moves ahead. What will be the impact on DoD Primes,…
An important report on the state of UK cybersecurity and actions that UK firms need to take to implement cybersecurity. The UK and EU is heading towards a cyber standards and regulatory problem, that is being driven by the US…
Last week the 2022 US National Defence Authorization Act (NDAA) was signed. With cyber in mind, there was a little controversy last week as some aspects of cyber were left out, such as cyber incident reporting. But lets not forget…
