Call us now:
When the Office of Budget and Management wrote OMB A130 in 1985 the intention was to assign responsibility to the OMB Director to develop and maintain a comprehensive set of information resource management policies for use across Federal government. Later complimented by the Federal Information Security Modernization Act (FISMA) in 2002 (2014 and 2022). requiring the adoption of security risk management and compliance (NIST SP 800-37, NIST SP 800-53) by Federal Agencies. It is clear from Congressional committees that FISMA has not been adhere to holistically across Federal Government.
The security of classified information is of concern, as the recent leaks of sensitive information in the U.S may have been for longer and wider than first anticipated. Raising questions of information security and compliance to existing security standards, ahead of new cybersecurity risk management regulation. As in the case of the most recent data breach, access to sensitive information and restricting the ability to exfiltrate it is an issue. Do not get me wrong, this is not a simple or easy exercise. But it is one that has been regulated for over 20 years.
But why should those outside the U.S care? The U.S is moving down a path of increased cyber regulation, it has the tools already to address Federal cybersecurity risk management compliance, it just needs the will to adopt, oversight and assure compliance. U.S industry regulators such as the SEC, FDA, DHS and the FTC are getting in on the act, adopting cyber regulations that affect companies that trade with the U.S. The EU Commission is also adopting a strong regulatory position, releasing cybersecurity regulation affecting CNI providers, Financial Institutions and the manufacturers of digital products and services.
What makes today different, from the past 20 years. Simply put the affect of cyber on ‘National Security’ and a will to enforce regulatory compliance that maybe like ‘shooting fish in a barrel’.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberlaw #datalossprevention #securitiesandexchangecommission #eucommission
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7055450150151806976