Positive to see the United States Department of War proactively moving ahead with the management of cybersecurity across the weapon systems procurement, design, and manufacture. The current approaches to deliver the RMF, in line with the Federal Information Security Modernisation…
A nice report from the European Union Agency for Cybersecurity (ENSIA) on the state of cybersecurity maturity of European Critical National Infrastructure (CNI) providers in 2024. While the page 8 of the report provides an indicative, robust, evaluation of the…
Bob Dix, one is equally amazed why no one ever takes hold of FISMA and just implements and enforces it. The US has regulation, executive orders and legal process coming out its ears. All it takes is for government to…
@Thaddeus Dziekanowski one is often surprised of the understanding of OMB A130 and FISMA and the part they play in U.S cybersecurity regulation. Least of all their applicability to suppliers to Federal Agencies that may collect or maintain information on…
We started writing about the adoption of the RMF, DoDi 8510.01, reciprocity and how the DoD, and other agencies can address cybersecurity risk management through reciprocity back in 2021. We called our strategy the Augusta Plan and presented to several…
We’re looking forward to discussing the Cybersecurity Framework 2.0 with Training Camp on the 14th May at 1pm EST. It importance for the implementation of FISMA and the RMF. A presentation that given a little more prominence as the U.S…
With the DoD moving towards the RMF and CSF, we at Veritas GRC felt the enclosed papers and video are important. We wrote several papers in 2021 on the adoption of the RMF, DoD 8510.01 and DoDi 5000.90 that are…
OMB A130 is the foundation of U.S cyber regulation such as FISMA – The regulatory elephant in the room the Federal government has never addressed. But maybe the saviour of SEC registrants, and entities covered by EU NIS 2…
Ted Dziekanowski isn’t the DoD meant to implement FISMA and DoDi 5000.90, that requires the adoption of NIST 37, CSF including IAM, zero trust. So it doesn’t have to break anything? Does anyone have a copy of the DoD IG…
One has a controversial question: It is very clear that the DoD needs to secure the DIB and that compliance to DFARS 252.204-7012 has not been met. But is CMMC needed, or has it been surpassed by recent cyber regulatory…
