The US is moving towards bringing a global, common, understanding and perspective of cyber. As the US has had a year of unprecedented change in cyber, following several attacks on Critical National Infrastructure. 2 Executive Orders focusing on Supply Chain…
If the US is playing catch-up, forging ahead with a robust legislative and regulatory enforcement regime in 2021 and 2022 to close gaps. How far behind are other Western governments? #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #dhs‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #cisa‚Â #governance‚Â #nist‚Â #nist800171‚Â #nist80053‚Â #cui‚Â #fedramp View Original Post
For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
Another cyber Bill makes its way through Senate approval. A further example of cybersecurity legislation pushing forward towards regulation, aiming to speed up the process of cloud service adoption by US Federal Agencies. FedRAMP is an important certification for Federal…
A great example of how critical national industries are adapting their cybersecurity posture as US Banking Industry Associations and Finance Institutions update their cybersecurity framework profile, in line with the NIST CSF (). The work is a very comprehensive update…
Thank you Ted Dziekanowski for sharing this, it is well worth a read. In my mind there are 3 countries that are leading the way in cybersecurity standards, the US, Israel and Australia. I’m not measuring cyber incidents here, recent…
Ted Dziekanowski, thoughts on cloud security. As HR solution provider Kronos reports Ransomware attack impacting parole processing. With services expected to be off line for some time, leading up to the Christmas holiday period. Ransomware is on the rise and…
US natural gas supplier Superior Plus is a victim of a ransomware attack. A example of an infrastructure supplier that suppliers gas to the US and Canada, suffering from a system outage. But following on from the Colonial attack earlier…
The 2022 NDAA may not have picked up as much cyber legislation as many hoped. But adding legislation into the defence bill has not stopped cyber legislation moving forward in the US. The Department of Homeland Security(DHS) has a commanding…
A small but meaningful fine of $1.5M by the SEC as it settle charges against GWFS Equities, Inc. (GWFS) for failure to file Suspicious Activity Report (SAR) following a recent cyber event. This enforcement action is the first of its…
