The U.S Office of National Cyber Directorate (ONCD) issued it’s national Cyber Strategy back in March 2023, it is now followed up with an outline€¦

← Back to Blog

The U.S Office of National Cyber Directorate (ONCD) issued it’s national Cyber Strategy back in March 2023, it is now followed up with an outline implementation plan.

This is a comprehensive and important document, that should be read by security professionals with care and consideration. The document outlines the strategic objectives of the U.S government for cybersecurity, that will effect both national and international compliance to cybersecurity for organizations and state that work or trade with the U.S.

The 5 pillars are self explanatory, Defend Critical Infrastructure (EU NIS 2), Disrupt and Dismantle Threat Actors (Offensive Cyber), Shape Market Forces (Compliance carrot and Stick), Invest in a resilient Future (Technology and innovation), Forge International Partnerships (Collaboration, harmonisation and standardization).

While allot will be written about the implementation. National and international organizations may wish to focus on Pillar three? It sets out requirements similar to the EU CRA for device labeling, shifting the liability for cyber where applicable to software and product vendors, funding, the insurance backstop, and;

Ted Dziekanowski, 3.5 sets out tools for compliance. We said prior to the advent of the DoJ Civil Cyber Fraud Initiative the False Claims Act will likely become a tool for the Federal Government to enforce its suppliers cyber compliance. Along side the Federal procurement process. The OMB has the tools to enact cyber through FAR rules (its already looking to do this for DoD DFARS) and the DoJ has a stated aim to address cyber compliance through the FCA.

National and International organisation should be aware that if this becomes the case. The tools will exist to enforce cyber compliance through U.S courts, for organizations that supply Federal Government. Rachel V. Rose, JD, MBA, one wonders the message this sends to the global Defense industry for DFARS compliance under DFARS 252.204-7012?

One can read some of our papers at www.augustagrp.com .They discuss many aspects of the changes in cyber regulation and opportunities for compliance through our work in cyber governance, risk and compliance. (www.augustagrp.com)

Stephen Pitt-Walker, JD, FGIA Jamie Foster

#cybersecurity #cyberriskmanagement #cyberregulation #cyberlaw

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7085515960568147968