Ted Dziekanowski isn’t the DoD meant to implement FISMA and DoDi 5000.90, that requires the adoption of NIST 37, CSF including IAM, zero trust. So it doesn’t have to break anything? Does anyone have a copy of the DoD IG…
The recent reported challenges with data security and DoD Cloud, along with the release by the GOA of a cloud security audit, appear from the outside to have created concerns within the DoD over cloud security. While one hopes that…
Thank you for posting Ted Dziekanowski. The recent exposure of DoD data, however critical the data is. Hopefully the DoDs adopted its own rules for cybersecurity, through FISMA, CMMC/ DFARSs and its own procurement instructions and processes. FISMA, DoDi 5000.90…
This is important. US Regulation is in place today to allow for the enforcement of cybersecurity across Federal government. With it likely that more will be developed and enforced to protect National Infrastructure. The Securities and Exchange Commission recently announced…
Regulatory reporting and oversight is a focus across many jurisdictions, as we start to come out of the Pandemic. The Bank of England following its commissioning of a number of reports from skilled persons¢â‚¬Â to assess systems and controls on…
A very important read. The SEC have launched an investigation into the SolarWinds hack, reaching out to 100’s of companies asking them to disclose records of ‘any other’ data breach or ransomware attack dating back to 2019, if they downloaded…
As a founding member of the CMMC AB standards working group and having built and led both 1st and 2nd Lines of Defence for cybersecurity and risk across regulated markets, I know the CMMC intimately and in my opinion CMMC…
Whilst COVID 19 has taken its toll on the Global economy cyber has not stood still, with several governments progressing cyber security initiatives. CMMC continues to make its way through Federal Government in 2021, with reports due to the US…
If true, have recent events emboldened extremists in the region? Targeting regional Western allies. #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #cyberinsurance‚Â #insurance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esgrisk‚Â #cyberregulation‚Â #esgreporting‚Â #soc2‚Â #defenceindustry‚Â #esg‚Â #defence‚Â #dodi500090 View Original Post
Thank you Dan Lips, a very interesting article which pulls together a number of regulatory and implementation strands associated with recent Presidential announcements on cybersecurity. There is a recognition that Federal Agencies have many of the tools to deploy cybersecurity…
