Call us now:
The Securities and Exchange Commissions (SEC) 2022 FISMA audit highlights the difficulties in cybersecurity risk management compliance. The Cybersecurity and Infrastructure Security Agency (CISA) released the enclosed metrics to guide Inspector Generals in the evaluation of FISMA 2014 compliance. The guide highlights the criteria and suggested sources of evidence to meet compliance to the 5 maturity levels of FISMA.
The SEC proposal requires organizations to adopt a cybersecurity Risk Management Framework, that could be NIST SP 800-37, and demonstrate that cyber risks are being managed. Organizations will have to demonstrate risk management using a cybersecurity framework such as ISO 27001, NIST CSF, Cloud Security Alliance, Center for Internet Security.
When you know what the regulators are looking for, it enables you to plan ahead and address reasonable gaps in cybersecurity compliance. While it would not be expected that an organization complies with FISMA, demonstrating compliance to an RMF and cybersecurity framework will be required. Along-side corporate governance, board experience and engaging external cybersecurity advice.
External board cybersecurity advice that we provide at www.parava.org
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #cyberlaw
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7044943910179065856