Call us now:
Thank you Dan Lips, a very interesting article which pulls together a number of regulatory and implementation strands associated with recent Presidential announcements on cybersecurity. There is a recognition that Federal Agencies have many of the tools to deploy cybersecurity oversight, assurance and management in place already But these authorities havent always been used effectively or even exercised.
With NIST looking to get increased responsibilities and authority, the use of the existing CyberSecurity Framework, if prioritise and aligned to industry, with external review (sound familiar CMMC) tied to tighter congressional oversight, assurance and reporting could be regulated for quickly.
However, the challenge which everyone faces Governments and business alike, is the time and cost to implement. But that issue does to change no matter the approach adopted. As the article points out, the process has to be ‘outcomes’ driven.
Jason Spezzano‚Â Brian McCarthy‚Â Ted Dziekanowski
#theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #cyberinsurance‚Â #insurance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esgrisk‚Â #cyberregulation‚Â #esgreporting‚Â #soc2‚Â #defenceindustry‚Â #esg‚Â #defence‚Â #dodi500090
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6839518702002610176