Cyber legislation can move forward, DHS and CISA can now focus on infrastructure oversight and assurance. Giving Chris Inglis the financial support he needs to meet US cyber strategy. DHS and CISA are behind the use of CSF profile to…
This article is a great read if you want to understand the impact of the SECs ESG regime and its impact on balancing the legal relationships between buyers and sellers. ESG is an issue for supply chains and an issue…
I am looking forward to speaking on the 19th. I will discuss US Cyber regulation including FISAM, DFARS and CMMC (US DoD) and their impact on US, UK and EU companies. I will also discuss US cyber legislation that is…
Federal cybersecurity gets off the starting blocks as the $1trn Infrastructure Bill gets passed. The bill provides funding that includes cyber for agencies including DHS and CISA. Passing the bill now allows for time on other legislation that includes cyber,…
Never let it be said cybersecurity is not a profitable business. Its just not profitable for the companies. With M&A and stock based compensation being a probable cause for the possess. Crowdstrike is an interesting example reporting losses totalling $375…
They came, they saw, they caught some sun, kicked back, kicked ass. The brits won. #ransomware‚Â #fisma‚Â #ofac‚Â #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #fca‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #falseclaimsact‚Â #afcea‚Â #afceacyber‚Â #aws View Original Post
The DoD has issued CMMC 2.0. Cybersecurity is a necessary requirement for the Defence Industry Base without a doubt. CMMC 2.0 will need some clarification. CMMC Level 3 will be aligned with NIST SP 800-172 and Level 2 NIST SP…
We published the Augusta plan 1.0 () in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of Cybersecurity and Supply Chain Risk Management (C-SCRM). Using existing regulated and qualified resources for the international oversight…
FedRAMP has finally release version 1.0 of NISTS OSCAL (Open Security Controls Assessment Language). This is an important first step in the documentation and automation of controls. It is key to clear controls inheritance and the implementation of the shared…
As the former Global head of Santander’s 2nd Line of Defence for Cyber risk, this regulation is one to watch. The US cyber regulatory agenda is moving at pace across Federal Government, with international impact. The Federal Trade Commission ()…
