Call us now:
The DHS isn’t looking towards the DoD CMMC program to assure cyber security compliance, but looks to be consider self assessment as a means to evaluate cybersecurity compliance. This is interesting as self assessment was the mechanism adopted by DFARS 252.204-7012 that is the foundation of the DoD CMMC program, a program that was recommended to address the failings of self assessment.
Ted Dziekanowski and I created an alternative approach that uses existing regulations, standards and the significant number of qualified audit resources that are employed globally to provide cybersecurity oversight and assurance. We called it the Augusta Plan and while it was focused on the DoD can be applied to any industry sector.
The Augusta Plan was reviewed in 2021 by a number of Federal Agencies and Audit Institutions who agreed there was merit in the proposal, as an effective alternative to current cybersecurity oversight and assurance programs.
https://lnkd.in/d-wv6ezN
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6969586566297960448