For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
Another cyber Bill makes its way through Senate approval. A further example of cybersecurity legislation pushing forward towards regulation, aiming to speed up the process of cloud service adoption by US Federal Agencies. FedRAMP is an important certification for Federal…
A great example of how critical national industries are adapting their cybersecurity posture as US Banking Industry Associations and Finance Institutions update their cybersecurity framework profile, in line with the NIST CSF (). The work is a very comprehensive update…
Thank you Ted Dziekanowski for sharing this, it is well worth a read. In my mind there are 3 countries that are leading the way in cybersecurity standards, the US, Israel and Australia. I’m not measuring cyber incidents here, recent…
Ted Dziekanowski, thoughts on cloud security. As HR solution provider Kronos reports Ransomware attack impacting parole processing. With services expected to be off line for some time, leading up to the Christmas holiday period. Ransomware is on the rise and…
US natural gas supplier Superior Plus is a victim of a ransomware attack. A example of an infrastructure supplier that suppliers gas to the US and Canada, suffering from a system outage. But following on from the Colonial attack earlier…
The 2022 NDAA may not have picked up as much cyber legislation as many hoped. But adding legislation into the defence bill has not stopped cyber legislation moving forward in the US. The Department of Homeland Security(DHS) has a commanding…
A small but meaningful fine of $1.5M by the SEC as it settle charges against GWFS Equities, Inc. (GWFS) for failure to file Suspicious Activity Report (SAR) following a recent cyber event. This enforcement action is the first of its…
SEC Commissionaire comments on the SEC Chairs regulatory agenda. Raising concerns that the current legislative and regulatory book of work is not as progressive as they would like. Cyber Risk Governance remains in the Fall 2021 calendar. Ted Dziekanowski Jason…
An article that is worth reading, an interview with Sir Jeremy Fleming, head of GCHQ by the FT on cyber, digital and digital currency. Is there recognition that the fast paced and dynamic nature of cyberspace requires global digital standards?…
