One wondered why the DHS recently outlined its role in the oversight of cybersecurity, as it related to OMB and FISMA? Then the FISMA 2023 proposal made it clear that several Homeland Security Committees will oversight the implementation of FISMA…
Ted Dziekanowski we have written many times of the role FISMA plays in U.S cybersecurity. Alongside OMB A-130 it forms the foundation of U.S cyber regulation. () FIMSA defines the framework for U.S Federal cyber compliance, that has in largely…
An interesting situation for the DoD following the recent publication of sensitive information, and a request from the defense secretary to evaluate DoD data security. With all the cybersecurity and information security regulations and programs Federal agencies and the DoD…
The U.S Defence secretary has ordered a comprehensive review of the DoDs security programs, policies and procedures for protecting sensitive information. That appears to follow the recent publication of sensitive data. One suspects that a policy, procedure and education review…
U.S and EU Cybersecurity regulations set out requirements for covered organization’s to demonstrate their governance over and management of cybersecurity risks. Cybersecurity risks that change with changes in organizational strategy, operations and financial performance. Governance over cybersecurity risk is managed…
The recent reported challenges with data security and DoD Cloud, along with the release by the GOA of a cloud security audit, appear from the outside to have created concerns within the DoD over cloud security. While one hopes that…
Thank you for posting Ted Dziekanowski. The recent exposure of DoD data, however critical the data is. Hopefully the DoDs adopted its own rules for cybersecurity, through FISMA, CMMC/ DFARSs and its own procurement instructions and processes. FISMA, DoDi 5000.90…
Thanks for posting Ted Dziekanowski, lets hope that cyber is one thing that both side of the house and senate can agree on. I wonder if it will raise questions on how regulation will be delivered, with oversight and assurance?…
Audit reports are not always the most riveting of reads, but I have to say this report is. Not because it’s about U.S Nuclear Cyber compliance but because it starts with OMB A130 and FISMA as the foundation for U.S…
FISMA has been around for 20 years and has been difficult for many Federal Agencies to adopt. Inspector general Audits are available that demonstrate the compliance of agencies by both Federal Inspector Generals and the GAO. In this case the…
