An important read for those following US cybersecurity risk management and regulatory enforcement. The US Department Of Justice (DoJ) announced the first resolution under its Civil Cyber-Fraud initiative using the False Claims Act (FCA). Investigated by State Department OIG and…
With our dependency on digital and tech, chip manufacturing has to be the most important national capability. Is Europe’s lack of chip manufacturing capacity going to create a significant security risk in the not to distant future? With the US…
Could Gartner’s 2020 prediction that the impact of cyber-attacks on physical infrastructure through OT, with the loss of human life start be correct? As cyber legislation and corporate actions gains pace for example shareholder suits for failing to protect shareholder…
If you are going to read anything this week, read this. With amendments proposed to NDAA 2022 for FISMA 2021, FISMA is on the legislative and regulatory radar. There have been amendments made to FISMA 2014 by OMB, under Executive…
The US Government Accountability Office (GAO) has issued its assessment of the CMMC program, required under the 2021 NDAA. It’s a synopsis of the history and current state of the CMMC program, highlighting concerns raised by industry and the challenges…
The Department of Justice(DoJ) is moving ahead at pace with its civil fraud initiative against government contractors that fail to comply with cybersecurity requirements. That include information security standards and cyber incident reporting obligations (DFARS 7012) and supply chain procurement…
In October this year the Department of Justice (DoJ) announced that it was putting in place a Civil Fraud initiative to enforce the False Claims Act (FCA). With a focus on organisations that fail to comply with cybersecurity standards required…
The U.S. Department of Homeland Security, Transportation Security Administration‚Â (TSA) agency last week issued security directives that implement new cybersecurity requirements on the‚Â US passenger rail‚Â and‚Â high-risk freight rail‚Â sectors. Owners and operators are required to: 1. Designate a cybersecurity coordinator 2. Report to…
The SEC has adopted rules under Sarbanes Oxley requiring the PCAOB to inspect third party auditors of firms that issue securities in the US. Allowing closer inspection of audit firms, their jurisdiction and ownership. A example where the US is…
It is a pleasure to be included in the INTERNATIONAL SECURITY JOURNAL (ISJ) list of influencers for the 2nd year running. Some of my predictions for 2021 were close, such as increased cyber legislation, regulation and supply chain security. For…
