NIST CSF profile provides organisations with a framework for the oversight and assurance of cybersecurity controls. CSF profiles provide many advantages over traditional NIST cybersecurity frameworks such as NIST SP 800-171 as they capture practices associated Governance, Strategy, the Business…
This is an important read. The Chair of the Securities and Exchange Commission (SEC) gave a presentation on Cybersecurity and Securities Law yesterday. Outlining the direction of cyber policy and regulation as it relates to financial markets including, Funds, Advisors…
A great article. 2021 was a difficult year for the cyber insurance/ re-insurance market, as it came to terms with the challenges of ransomware. Leading to increased premiums, reduced coverage and increased loss ratios. No one is predicting that cyber…
The Chair of the SEC talking at an event on the 19th January, describing the dynamic nature of markets regulation mirroring the dynamic nature of markets and society. Our current global threats of climate change, human capital and cyber being…
A very interesting read, the World Economic Forum (WEF) 2022 global risk report. As expected cyber is up there in the top risks with 2021 being a year for Ransomware up 435% on 2021 and a lack of skilled resources…
Following yesterdays House Oversight and Reform committee hearing on updating FISMA (2022). I have enclosed a paper that outlines the importance of FISMA and the Office of Management and Budgets OMB-A130 regulation. That have are foundations of US Federal Cyber…
The enclosed committee hearing(11.01.2022) is important to watch. For those that do not know about the Federal Information Security Modernization Act 2014 (2002), it is foundation regulation that forms part of the US approach to cyber security. It was last…
I’m pleased to announce that the Augusta Group with 327 Solutions are running seminars in 2022 on US cyber regulation and legislation. Starting next month we will be discussing the changing US legislative landscape as it related to cyber and…
There’s been allot of talk about CMMC over recent weeks and months and its impact on the Defence Industry Base (DIB). But CMMC only focused on the cybersecurity requirements of the Department of Defence. To date the primary cyber regulation…
For those looking to understand the history of DFARS, NIST SP 800-171 and CMMC. As it has been applied by the DoD then the enclosed GAO report is a must read document. Published in December 2021 by the US Governments…
