The alert from CISA this week that Russian State Sponsored Cyber Actors have obtained US defense information and technology, highlights the challenges that the US DIB faces with securing its supply chains. With threat actors gaining access to sensitive unclassified…
Will cATOs make their way into the DoDs DIB? DoDi 5000.90 seems to point to DoD procurement the adoption of FISMA. RMF and cyber compliance evaluation prior to an ATO sign off. cATOs make sense. #theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cyberinsurance‚Â #insurance‚Â #defence‚Â #defense‚Â #sec View Original Post
Thank you International Security Journal (ISJ) for resharing the enclosed article. Recent SEC proposals on cybersecurity regulation for the Finance industry, and request by several senators for the SEC to require the boards of public companies to have cyber expertise…
The SEC looks to be under pressure from Senators calling for it to go further following last weeks proposal to regulate cybersecurity for investment funds. Senators are asking for publicly traded companies to disclose to investors if they have a…
If you are a defense contractor then the enclosed is an important read. The Aerojet Rocketdyne False Claims Act, DFARS 252.204-7012, cybersecurity compliance case continues despite attempts to derail it. Opinions on various cross-motions received summary judgements that may not…
Last week 7 US Senators wrote to the Chair of the SEC asking him to do MORE to address cybersecurity, prior to his recent release of cybersecurity regulatory proposals aimed at Investment funds. ‘We write to urge the Securities and…
A great Synopsys from Harvard Law on the SECs cyber regulations for Investment funds and Advisers proposed last week. 1. Incident reporting. 2. Disclosure of cyber risks and incidents. 3. Cyber risk management policies and procedures. Ted Dziekanowski #theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cyberinsurance‚Â #insurance‚Â #defence‚Â #defense‚Â #sec View…
Last week the Securities and Exchange Commission (SEC) published the enclosed comprehensive proposal for cyber-risk management regulation for investment funds and advisers. It is a comprehensive 243 document that outlines cybersecurity for the investment industry that includes the necessary policies,…
The SEC launched a clear first cyber shot across the bows of corporate America this week in a 3:1 vote by SEC commissioners, proposing to implement cyber regulation for investment funds and advisers. The Chair of the SEC has described…
Thank you Luca Leone. An already strained DIB makes the additional burden of cybersecurity requirements lower down the supply chain difficult to implement. Requiring careful consideration to burden and cost while maintaining cybersecurity standards to protect the loss of the…
