Can someone help please? All defence contractors need to comply and flow down NIST SP 800-171 if they have DFARS 252.204 – 7012 in their contracts. Requiring them to implement 110 cyber practices, submit compliance scores to SPRS and prepare…
A very useful critique by Bloomberg of US cyber legislation S. 2875 (the Cyber Incident Reporting Act of 2021) and‚Â H.R. 5440 (Cyber Incident Reporting for Critical Infrastructure Act) and the role of CISA. With both the ‘carrot and stick’ now…
CISA promotes the use of CyberSecurity Framework (CSF) profiles to improve cybersecurity resilience and cyber-risk management. With frameworks created for chemical industry, commercial facilities, critical manufacturing, dams, defense industrial base, emergency services, federal, healthcare & public health, nuclear, transportation systems…
Last week the US Congress moved a step closer to implementing cybersecurity across the whole of Federal government, as it signed the 2021/2022 Infrastructure Investment and Jobs Act. A rather innocuous sounding Act, yet one that will have a significant…
Brings a new meaning to Phishing. Ted Dziekanowski‚Â Brian McCarthy‚Â Jason Spezzano #ransomware‚Â #fisma‚Â #ofac‚Â #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #fca‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #falseclaimsact‚Â #afcea‚Â #afceacyber‚Â #aws View Original Post
I spoke to AFCEA London on the 4th of November on changes to US cyber regulation, legislation and enforcement. What they mean to the UK and European Defence Industry Base (DIB) and the impact they could have on the complex…
Cyber legislation can move forward, DHS and CISA can now focus on infrastructure oversight and assurance. Giving Chris Inglis the financial support he needs to meet US cyber strategy. DHS and CISA are behind the use of CSF profile to…
This article is a great read if you want to understand the impact of the SECs ESG regime and its impact on balancing the legal relationships between buyers and sellers. ESG is an issue for supply chains and an issue…
I am looking forward to speaking on the 19th. I will discuss US Cyber regulation including FISAM, DFARS and CMMC (US DoD) and their impact on US, UK and EU companies. I will also discuss US cyber legislation that is…
Federal cybersecurity gets off the starting blocks as the $1trn Infrastructure Bill gets passed. The bill provides funding that includes cyber for agencies including DHS and CISA. Passing the bill now allows for time on other legislation that includes cyber,…
