Call us now:
The enclosed committee hearing(11.01.2022) is important to watch. For those that do not know about the Federal Information Security Modernization Act 2014 (2002), it is foundation regulation that forms part of the US approach to cyber security. It was last updated in 2014 and there a plans to make modifications to the Act proposed by the Senate in late 2021 and now the House of Representatives in January 2022. To meet the Executive Order signed by the US President in May 2021 focusing on the Nations Cybersecurity.
If FISMA updates are signed into law they will have a significant impact on Federal cybersecurity and cyber risk management, given the recent focus on cyber legislation and regulatory enforcement. FISMA requires the adoption by Federal Agencies of NIST SP 800-37 (now R2) and the management of cyber risk. It is also also being used to provide DHS and CISA with appropriate authority for cyber oversight across Federal Government.
FISMA addresses C-SCRM and applies to contractors of Federal Agencies. By way of example for those contractors and subcontractors that supply the US DoD, the DoD is implementing DoD 8510.01 across all its branches and adopting a risk based approach to procurement through DoDi 5000.90. When FISMA 2022 goes ahead there are likely to implications for companies outside the US as much as those inside.
See my post today on FISMA and the Augusta Group.
Ted Dziekanowski Brian McCarthy Jason Spezzano
#theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #governance‚Â #nist‚Â #cyberinsurance
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6886931248892141568