Call us now:
The regulatory environment in the US is developing quickly. 2 SCRM and cyber Executive Orders have been signed in 2021, setting requirements for fact finding and cybersecurity regulation. Cybersecurity is a significant component of the draft 2022 NDAA and a path has been made to move the US Infrastructure Bill forward. That contains cybersecurity requirements across Federal, State, Local and Tribal government including initiatives for Energy, Water, Transport, Response, Recovery and Coordination amongst 320 other mentions.
However an issue that must be faced is how to address cybersecurity for small business, which makes up 99% of US companies. These firms do not have the financial resources, skills or expertise to deliver what is required. Within a market which does not have the skilled resources globally and giving money to small business won’t address the problem if the skills do not exist. There needs to be appropriate oversight and assurance of cyber for small business and a solution which enables firms to identify their cyber posture, manage their cyber controls and demonstrate their cyber capability to regulators, shareholders and customers.
In our paper we discuss the challenges faced by small business and Federal government in adopting cybersecurity. We propose a solution for cyber oversight and assurance and controls inheritance which can be applied today. Using existing regulated resources and solutions for oversight and assurance, and cloud for controls inheritance. A solution that is flexible and can be applied by different industry sectors. Delivering a cost effective, efficient and secure solution. Meeting the requirement of regulations such as FISMA and a solution that can be applied by domestic and international businesses impacted by programs such as CMMC.
Looking for critique.
Ted Dziekanowski Jason Spezzano Brian McCarthy
#theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #cyberinsurance‚Â #insurance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esgrisk‚Â #cyberregulation‚Â #esgreporting‚Â #soc2‚Â #defenceindustry‚Â #esg‚Â #defence
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6836598812522405888