We are all dependent upon manufacturers and their supply chains for the food we eat, the water we drink, our power, transport, healthcare and food

← Back to Blog

We are all dependent upon manufacturers and their supply chains for the food we eat, the water we drink, our power, transport, healthcare and food production to name a few, and services cannot be provided without IT hardware, software and communications equipment. Our dependence on digital demonstrates the challenges we face if technology is not available when it is required or is compromised. The cyber standards adopted by manufacturers are of increasing importance as the severity, complexity and frequency of cyber attacks on critical national infrastructure increases.

The US and Europe have adopted a number of standards including NIST and ISO, that in most part are not regulated. But the US legislative and regulatory wheels are turning and recent announcement demonstrate that cyber standards compliance will be enforced for Federal agencies and contractors. The DoDs DFARS regulation requires defense contractors and subcontractors to implement NIST SP 800-171. As other regulators require more compliance 171 will not be enough, it does not address areas of governance, strategy, business and risk management. It is not flexible enough to account for the requirements of different industry sectors and their business and mission objectives and here lies the challenge for manufacturers.

To address this flexibility NIST developed CyberSecurity Framework Profiles (CSF) for many industries including manufacturing. Profiles that are mapped to frameworks including 171, but include a broader suit of practices that tie cybersecurity to governance, strategy and risk. Governance requirements that maybe required for example by the Securities and Exchange Commission (SEC), if they develop cyber risk governance legislation as proposed in 2021.

Feel free to share our enclosed video. A quick view of cybersecurity and the Manufacturing CSF.

Get in touch if you want to know more.

Ted Dziekanowski Brian McCarthy Jason Spezzano

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact‚ #afcea‚ #afceacyber‚ #aws‚ #dhs‚ #cisa‚ #appgai‚ #securitiesandexchangecommission

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6866648631529795584