The DoD has issued CMMC 2.0. Cybersecurity is a necessary requirement for the Defence Industry Base without a doubt. CMMC 2.0 will need some clarification. CMMC Level 3 will be aligned with NIST SP 800-172 and Level 2 NIST SP…
We published the Augusta plan 1.0 () in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of Cybersecurity and Supply Chain Risk Management (C-SCRM). Using existing regulated and qualified resources for the international oversight…
FedRAMP has finally release version 1.0 of NISTS OSCAL (Open Security Controls Assessment Language). This is an important first step in the documentation and automation of controls. It is key to clear controls inheritance and the implementation of the shared…
As the former Global head of Santander’s 2nd Line of Defence for Cyber risk, this regulation is one to watch. The US cyber regulatory agenda is moving at pace across Federal Government, with international impact. The Federal Trade Commission ()…
For those in the cyber community, most will not have heard about OFAC, so this is an interesting read from Eversheds. With over 600 suspicious activity reports filed in the first half of 2021, a 30% increase on the whole…
AWS looks to be aligning its cloud security to CyberSecurity Framework Profiles (CSF), following a October 2021 update of its CSF policy. Providing a level of global flexibility between alternate frameworks such as ISO/ IEC 27001, NIST SP 800 –…
On the 4th of November I am speaking to the AFCEA (the Armed Forces Communications and Electronics Association) London Chapter, discussing the developing cybersecurity and risk management legislative agenda in the US, and existing cyber regulations that could impact on…
A balanced view of cybersecurity and a good read by SEC Commissionaire Elad Roisman to the Los Angeles County Bar Association on cybersecurity and meeting the meeting emerging challenge. Highlighting the challenges organisations face with managing cybersecurity and meeting their…
The DoDs CIO confirmed to the Senate Armed Service’s Committee that the CMMC needs to reflect concerns of small business, while Senator Tom Tuberville reiterates the impact of cyber on R&D and small businesses, with $116bn expected to be spent…
The corporate balance sheet is under substantial pressure from cyber, it is probably the most complex and expensive non-financial risk in todays the board room and a risk being regulated by Federal Government. Cyber security and risk management are inextricably…
