Call us now:
This is what the EU is regulating its CNI providers to do: manage continuity of service. It’s what the US defence department has expected global defence contractors to do since 2017. The issue at hand is not one of strategy; the playbooks for cyber strategy have been written over and over.
The issue at hand is one of confirming the strategy into law and focusing on delivery. As Marks and Spencer and JLR found out, and are finding out. Without guidance and support, carrot and stick, the private sector has no motivation to manage continuity of service.
The US is also a strong advocate of regulating cyber into international supply chains, as demonstrated this week when CMMC was added to the Federal Register. CMMC has little carrot and a fair bit of stick.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC
#cybersecurity #cyberregulation
https://lnkd.in/e_vDSWJQ
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7372541114941214720