Is the UK starting to wake up to the challenges cyber presents in 2022? The UKs recent cyber strategy should stand it in good stead to protect the Nation? As countries like the US legislates cyber and embeds regulatory enforcement…
The Capital One hack of 2019 rumbles on, as the company agrees to pay $190 Million to settle a class-action law suit. Whilst denying liability, both Capital One and AWS agree to settle to save time. ¢â‚¬Å“While Capital One and…
The US is moving towards bringing a global, common, understanding and perspective of cyber. As the US has had a year of unprecedented change in cyber, following several attacks on Critical National Infrastructure. 2 Executive Orders focusing on Supply Chain…
If the US is playing catch-up, forging ahead with a robust legislative and regulatory enforcement regime in 2021 and 2022 to close gaps. How far behind are other Western governments? #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #dhs‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #cisa‚Â #governance‚Â #nist‚Â #nist800171‚Â #nist80053‚Â #cui‚Â #fedramp View Original Post
For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
Another cyber Bill makes its way through Senate approval. A further example of cybersecurity legislation pushing forward towards regulation, aiming to speed up the process of cloud service adoption by US Federal Agencies. FedRAMP is an important certification for Federal…
A significant move by the US authorities, revoking China telecoms licence to operate in the US. Following concerns of the link between the company and the Chinese state. View Original Post
The National Institute for Science and technology (NIST) released Revision 5 of its NIST 800 – 53 standard this week. A tomb of a document at 483 pages, but one often seen as a foundation for security practices and controls.…
For those of us in the security profession there is plenty of cross over between cyber security control frameworks, be that ISO or NIST and other regulatory requirements. SoX has from its inception focused on Access to Programmes and Data…
I’m my view there is a move within the US to implement NIST as a common standard for cyber security. Which can only be a good thing, not because it’s NIST, but because there is a move to recommend a…
