Worth a read, NIST has published a draft revision to NIST SP 800-53, looking for comments. The revision looks to improve control oversight and assurance. 1. Improve the efficiency of conducting control assessments. 2. Provide better traceability between assessment procedures…
Well worth reading. The GAO has published a report at the end of July which they issued earlier in the year (March) on cyber security and IT across Federal agencies. Highlighting the need to make improvements in cyber and address…
The Australian Government has launched a public consultation aiming for regulatory reforms to increase investment in business cybersecurity. Including setting clear cyber minimum security expectations; increased transparency and disclosure; and protecting consumer rights. The proposals set a clear direction for…
Remember where the term computer bug is reported to come from, well. How about a new term for a shut down of a nuclear reactor, we will call it the ‘spray and prey’…¢â‚¬Â¦clean the reactor room and prey that nuclear…
Critical National Infrastructure (CNI) Operations Technology, specifically Industrial Control Systems, gets focus under a Whitehouse memorandum. To encourage and facilitate the deployment of technologies and systems that provide threat visibility and cyber response for CNI. Expanding the deployment of cyber…
The UK is not alone, we are all slowly coming to terms with the fact that cyber is a systemic risk. One which has the potential to touch many aspects of our lives, including national security. What is our defensive…
The enclosed from the DoD Defence Logistics Agency (DLA) may have implications if you are a supplier to the DoD and require export controlled technical data which is CUI for procurement opportunities. The CMMC interim final ruling was passed in…
Cyber regulation is being developed at a faster rate than at any other time. With the Securities and Exchange Commission (SEC) releasing its Environment Society and Governance (ESG) regime, including cyber risk governance in its 2021 regulatory agenda. The US…
The US house of representative passed a bill on the 21.07.21 providing the Cybersecurity Infrastructure Security Agency (CISA) the authority to establish the State and Local Cybersecurity Grant Program. To address cybersecurity risks and threats to the information systems of…
You don’t normally associate ESG funds with the Aerospace and defence Industry. However environmental funds do hold a small percentage of their investments in Aerospace and Defense and in 2022 European ESG might start reporting investments in defence firms. But…
