An important audit from the U.S Government Accountability Office (GAO), ‘Defense Industry Base – DOD Should Take Actions to Strengthen Its Risk Mitigation Approach’. It is one of many recent GAO reports that articulate the risks posed by the DIB…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
In my view the DoD is laying the ground work for the CMMC program. Reaffirming DFARS clause 252.204-7012, the implementation of NIST SP 800-171 at a minimum, and the penalties for non compliance. Penalties that Include withholding progress payments; foregoing…
The U.S. Government Accountability Office(GAO) has reported again on the issues of cybersecurity on the U.S. economy, and the potential for catastrophic losses in the event of cyber attacks. With cyber insurance and the government backstop for losses from terrorism…
The New Zealand Financial Markets Authority (FMA) this month reminded market service licensees of their obligations to manage cyber and operational resilience. The FMA is responsible for regulating all financial market participants, exchanges and the setting and enforcing financial regulations.…
For those National and International DIB contractors this report is an interesting read. The DoD is undergoing its own assessment of cybersecurity compliance, for the oversight and assurance of Controlled Unclassified Information (CUI). Making progress in complying with FISMA (DoDi…
This week the U.K. MoD released its cyber resilience strategy, a vision outlining its cyber plans for defence. It comes at a time when cyber regulation and plans of partner nations are more advanced than those of the U.K. The…
A very interesting and recommended read for those following yesterdays SEC announcement proposing cybersecurity risk management, strategy, governance and incident disclosure for covered entities. This FISMA report evaluates the SECs own compliance to information security program, practices, and NIST SP…
Last week the Securities and Exchange Commission (SEC) published the enclosed comprehensive proposal for cyber-risk management regulation for investment funds and advisers. It is a comprehensive 243 document that outlines cybersecurity for the investment industry that includes the necessary policies,…
Thank you The Security Institute. Being able to represent the Institute and support the wider debate on cybersecurity and the Institutes members in the UK is a privilege. #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #securitiesandexchangecommission‚Â #dhs‚Â #governance View Original Post
