Assessing cybersecurity risk is a problem for everyone, not just Space Force. As many will find if the SEC moves ahead with its cybersecurity risk management proposal, the EU NIS 2.0 directive is implemented and EU DORA is agreed. Cybersecurity…
The CISA website has plenty of CSF profiles and an implementation guide for CSF profiles for the Defence Industry Base (DIB). CSF profiles are required by FISMA (and the DoD – DoDi 8510.01) and implemented by the SEC. I wonder…
The U.S. has plenty of cybersecurity and risk management standards, that are aligned to FISMA and OMB A-130. FISMA has been adopted by he DoD under DoDI 8510.01 with derivatives across DoD branches and NIST SP 800-30, 800-37 and 800-39…
For those National and International DIB contractors this report is an interesting read. The DoD is undergoing its own assessment of cybersecurity compliance, for the oversight and assurance of Controlled Unclassified Information (CUI). Making progress in complying with FISMA (DoDi…
Know your enemy and know yourself to build an effective defence. Cyber threat modelling along-side vulnerability assessment and a clear managed enterprise wide architecture are important components to cybersecurity risk management. However this is the challenge. The Securities and Exchange…
A very important read for cyber security and Critical National Infrastructure (CNI) in the US. The US president signed into law the ‘2022 Consolidated Appropriations Act’ containing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (the Cyber Incident Reporting Actâ€). …
A comprehensive summary of this weeks Securities and Exchange Commission announcement of proposed cybersecurity risk management strategy, governance and incident disclosure reporting. That could effect covered entities on US capital markets. Ted Dziekanowski Jason Spezzano Brian McCarthy #theaugustaplan #cybersecurity #cyberriskmanagement #regulatorycompliance #cybercompliance #cyberregulation #cybergovernance #ransomeware #governance #scrm #fisma #sec View…
A very interesting and recommended read for those following yesterdays SEC announcement proposing cybersecurity risk management, strategy, governance and incident disclosure for covered entities. This FISMA report evaluates the SECs own compliance to information security program, practices, and NIST SP…
The European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines at the end of 2021. At a time when the US Federal government is also progressing legislation through Congress to address cybersecurity governance,…
Cyber insurance prices are up, coverage down and loss ratios rising. Cyber is a difficult risk to manage and innovation, economic growth, cyberspace and technology are not on the side of the underwriter and the insured. In our paper we…
