We published the Augusta plan 1.0 ( in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of

← Back to Blog

We published the Augusta plan 1.0 (https://lnkd.in/dSzVfVWu) in June 2021 to address the challenges of the oversight, assurance and cost effective implementation of Cybersecurity and Supply Chain Risk Management (C-SCRM). Using existing regulated and qualified resources for the international oversight and assurance of cybersecurity compliance. The Augusta plan recommended the adoption of controls inheritance and the cloud shared responsibility model, to manage data protection and the chain of custody of data across the global DIB. To provide a cost effective solution for C-SCRM.

We have further developed the Augusta Plan (2.0 enclosed) to address FISMA Federal regulation, that requires all Federal agencies and their contractors to implement the Risk Management Framework (RMF). Extending the scope of the Augusta plan and developing an Adaptive Risk Management (ARM) framework that adopts a risk based approach for C-SCRM as required by FISMA and OMB.

We continue to recommend the use of CyberSecurity Framework(CSF) profiles defined by NIST to provide an appropriate controls taxonymy to mitigate risk as required under NIST SP 800-37R2. CSF profiles, for example the NIST manufacturing CSF profile, provide a flexible and comprehensive approach for cybersecurity risk-mitigation. SCF profiles address control domains including Governance, Business Strategy, Business Environment and Risk Management. Integrating cybersecurity mitigation with the required oversight and assurance of C-SCRM that is required by the board room.

Augusta 2.0 advocates the adoption of the shared responsibility model, as controls inheritance is critical to security of information and the cost effective implementation of C-SCRM across complex supply chains, comprised of small medium or large organisations.

The Augusta plan is flexible and will be developed as the needs and requirements of C-SCRM develop through Federal, state, local and tribal legislation and regulation.

Please let us know your thoughts?

Ted Dziekanowski Jason Spezzano Brian McCarthy

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact‚ #afcea‚ #afceacyber‚ #aws

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6861938766517424128