Call us now:
@Thaddeus Dziekanowski, an important read. We rely upon the maritime industry for many of the products we consume. Over 80% of the volume of international trade in goods is carried by sea, and the percentage is even higher for most developing countries (https://lnkd.in/eYAwqa_T.) Much of which moves in containers.
When one considers the focus of the international hacking community, CNI is a prime target for cyber attack. Whether it is power, oil, gas, water, pharmaceutical payments or the maritime industry, CNI invaluably creates concentration risk. Ports and the transport of containers are no exception.
In a further example of cybersecurity regulation, the US government has announced a series of regulatory actions to combat cyber threats in the maritime domainâ€â€broadly targeted at US flag commercial vessels, waterfront facilities, and certain offshore facilities regulated by the U.S Coast Guard (USCG).
In this case the U.S Coast guard has determined that cranes manufactured by China, maybe  “controlled, serviced, and programmed from remote locationsâ€Â. Therefore they are potentially “vulnerable to exploitation, threatening the maritime elements of the national transportation system.
Effective the 21st February 2024 EO 14116 was issued by the U.S President, updating 33 C.F.R. Part 6, extending existing the USCG authority over physical risk to those of cyber risk. Setting out requirements to review incident planning, response and reporting plans for regulated water front facilities and US flag vessels. A further example of cyber regulation expanding out across U.S CNI, public and private sector organisations.
Cyber risk management continues to moves ‘Left of Bang’ Brian D. McCarthy. Requiring boards of covered entities adopt appropriate governance, oversight, assurance and attestation of cyber risk. Increasing the legal and compliance risks on the boards of covered entities. Governance that realistically requires covered boards to adopt a robust 3 line framework, supported by audit Ryan Buckner, risk management, cybersecurity and importantly General Counsel Rachel V. Rose, JD, MBA
Veritas GRC Rich Waite, M.Ed. George Sawyer National Institute of Standards and Technology (NIST), Chris Burt Bryan Foss Faisal Khan Federal Bar AssociationThe Institute of Internal Auditors Inc. ECIIA | European Confederation of Institutes of Internal Auditing
#cybersecurity #cyberriskmanagement #cyberregulation #iotsecurity #3lod
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7175090564344762368