Business Roundtable’s Post

StateRAMP has been tracking the harmonization efforts by the Office of the National Cyber Director (ONCD), since submitting a response to the ONCD’s RFI on Framework Harmonization last fall. Thanks to the ONCD for their continued work on this issue! We also appreciate the testimony given on Wednesday, June 5 by Assistant Director Nick Leiserson to the Committee on Homeland Security and Governmental Affairs. StateRAMP is a first step for framework harmonization in SLED, and our leadership is committed to working at all levels to strengthen and streamline cybersecurity for our communities and nation. #cybersecurity #regulatoryharmonization #frameworkharmonization #government

It's not every week that cybersecurity regulatory harmonization is trending, so, when it is, you know we can't pass up the opportunity! Check out the White House's summary of responses to its RFI on #cyberregharmonization, which calls out the CRI Profile as an "instructive example." Kudos to Senate HGSAC and ONCD's Nick Leiserson for highlighting the challenges many sectors face, but particularly financial services, in grappling with divergent cyber expectations in today's hearing. The CRI Profile exists to harmonize cyber compliance requirements in a common format, allowing organizations to focus on front line defense. Check out more at www.cyberriskinstitute.org Joshua Magri Emily Beam John Goodman, CISSP, CCSK, CISM, CRISC, CGEIT, PMP https://lnkd.in/gMUbBBgF

For the first time in six years, the U.K. announced plans for two new pieces of cybersecurity legislation in yesterday’s speech from the King. The Digital Information and Smart Data Bill focuses on data use, including the creation of new digital verification services. The Cyber Security and Resilience Bill provides an update to the existing Network and Information Security (NIS) Regulations from 2018 and is aimed at further protecting critical national infrastructure and supply chains. As further details emerge surrounding these bills, FTI Consulting Cybersecurity is prepared to assist organizations with timely compliance to the legislation. Learn more: https://bit.ly/4d6UzrX

The White House calls for and commits to work toward baseline harmonized cybersecurity requirements. https://lnkd.in/eyU64yMe Decades-old “reasonable security” standards, as codified by FTC guidance and industry best practices, may soon become a fair bit more regulatory. They write, “we need Congress’s help to bring all the relevant agencies in the government together to develop a cross-sector framework for harmonization and reciprocity for baseline cybersecurity requirements.” #cyberlaw

Passwords have become more of a cybersecurity problem than a solution in 2024. While they were meant to protect systems and users from internal and external threats, the complexity of passwords has made them vulnerable. However, the evolution of passwordless authentication has been taking place since the 1980s, with dynamic one-time passwords held by physical fobs. Johan Fantenberg, principal solutions architect for APJ at Ping Identity, acknowledges the challenge organisations face in implementing passwordless authentication. He states, “Due to the complexity of passwordless solutions, they may find it hard to trust them. There is also a challenge in educating the general public before organisations can fully implement it.” As we move further into the digital age, passwordless authentication may be the solution to our cybersecurity problems. Despite the challenges, organisations must start educating themselves and the public to implement this new technology. https://lnkd.in/gzxbeNa5

The recent cyberattack on Change Healthcare emphasizes the urgency for reliable defense strategies in the face of relentless cyber threats. As healthcare continues its digital evolution, cyber attacks pose significant threats to the industry, including payment disruptions, delayed authorizations, and stolen client data. Continue reading on at Healthcare Dive to learn how healthcare orgs can safeguard their data. https://okt.to/QNzT2C

I had a great time joining Roger Waldron of Off the Shelf to discuss all things cyber. Check out our conversation at the link below. #cybersecurity #cmmc #governmentcontracting #fedramp #softwaresecurity #supplychain

Today, the Cybersecurity Coalition joined the Chamber of Commerce and 24 other organizations to request a 30-day comment period extension from CISA on the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). Considering that the rules will impact every critical infrastructure sector, and potentially serve as a model for others, extending the comment period is sensible. The extension will give stakeholders the necessary time to review and evaluate the requirements, identify challenges, and propose solutions. Read the letter here: https://lnkd.in/eWFVnzTr

Trying to work out if you are an "Essential Entity" or an "Important Entity" for when #NIS2 comes into effect later this year, and want to know what the difference is and why it matters? Then check out Marco Piana's helpful visual guide for Digiphile below 👇

The European Union launches its first major "cyber shield" called #CybersecurityAct", adopted by the European Parliament and aims to strengthen the security of #EU networks and information systems.  It provides for the creation of a European #cybersecurity center and a network of national cybersecurity centers.  Il also establishes a cybersecurity certification framework for ICT products and services. The aim of the shield is to protect the EU's critical infrastructures and strengthen cooperation between member states in the field of cybersecurity. The creation of this shield comes against a backdrop of increasing cyber-attacks, particularly from Russia. Via CyberVeille 🇫🇷 https://lnkd.in/eeqmJzD3