Leading out of the starting blocks into 2022 I have a question. ‘Is cyber a risk that can be insured today without a radical rethink of the oversight and assurance of cyber risk management by the cyber insurance industry?’ In…
A possible Nation State hack in March 2021 against the the UK’s Ministry of Defence Defence Academy, was more significant than reported at the time. Successfully attacking the MoDs University, a facility that appears to be inside a wider MoD…
Happy New Year to everyone. Wishing all happiness, safety, health, security, prosperity and success for 2022. View Original Post
Is the UK starting to wake up to the challenges cyber presents in 2022? The UKs recent cyber strategy should stand it in good stead to protect the Nation? As countries like the US legislates cyber and embeds regulatory enforcement…
The Capital One hack of 2019 rumbles on, as the company agrees to pay $190 Million to settle a class-action law suit. Whilst denying liability, both Capital One and AWS agree to settle to save time. ¢â‚¬Å“While Capital One and…
The US is moving towards bringing a global, common, understanding and perspective of cyber. As the US has had a year of unprecedented change in cyber, following several attacks on Critical National Infrastructure. 2 Executive Orders focusing on Supply Chain…
If the US is playing catch-up, forging ahead with a robust legislative and regulatory enforcement regime in 2021 and 2022 to close gaps. How far behind are other Western governments? #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #dhs‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #cisa‚Â #governance‚Â #nist‚Â #nist800171‚Â #nist80053‚Â #cui‚Â #fedramp View Original Post
For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
Another cyber Bill makes its way through Senate approval. A further example of cybersecurity legislation pushing forward towards regulation, aiming to speed up the process of cloud service adoption by US Federal Agencies. FedRAMP is an important certification for Federal…
A great example of how critical national industries are adapting their cybersecurity posture as US Banking Industry Associations and Finance Institutions update their cybersecurity framework profile, in line with the NIST CSF (). The work is a very comprehensive update…
