There’s been allot of talk about CMMC over recent weeks and months and its impact on the Defence Industry Base (DIB). But CMMC only focused on the cybersecurity requirements of the Department of Defence. To date the primary cyber regulation…
For those looking to understand the history of DFARS, NIST SP 800-171 and CMMC. As it has been applied by the DoD then the enclosed GAO report is a must read document. Published in December 2021 by the US Governments…
The US is moving forward quickly to address the challenges that cybersecurity and its low levels of cyber maturity bring. Challenges that it is not alone in facing and in all likely hood is more advanced than many Western nations…
Leading out of the starting blocks into 2022 I have a question. ‘Is cyber a risk that can be insured today without a radical rethink of the oversight and assurance of cyber risk management by the cyber insurance industry?’ In…
A possible Nation State hack in March 2021 against the the UK’s Ministry of Defence Defence Academy, was more significant than reported at the time. Successfully attacking the MoDs University, a facility that appears to be inside a wider MoD…
Is the UK starting to wake up to the challenges cyber presents in 2022? The UKs recent cyber strategy should stand it in good stead to protect the Nation? As countries like the US legislates cyber and embeds regulatory enforcement…
The Capital One hack of 2019 rumbles on, as the company agrees to pay $190 Million to settle a class-action law suit. Whilst denying liability, both Capital One and AWS agree to settle to save time. ¢â‚¬Å“While Capital One and…
The US is moving towards bringing a global, common, understanding and perspective of cyber. As the US has had a year of unprecedented change in cyber, following several attacks on Critical National Infrastructure. 2 Executive Orders focusing on Supply Chain…
If the US is playing catch-up, forging ahead with a robust legislative and regulatory enforcement regime in 2021 and 2022 to close gaps. How far behind are other Western governments? #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #dhs‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #cisa‚Â #governance‚Â #nist‚Â #nist800171‚Â #nist80053‚Â #cui‚Â #fedramp View Original Post
For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
