Regulations, Frameworks, and Controls - May 14, 2021

Hacking H2O: A Plea To Mandate The NIST CSF To Secure Critical Infrastructure

Back in 2016, I gave a talk at an American Water Works Association (AWWA) conference highlighting the benefits of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and how it can be used to manage cyber risk for critical infrastructures, like water management systems. By Richard Tracy I May 10, 2021

NIST and CISA Release Guidelines for Organizations and Vendors To Defend Against Software Supply Chain Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute for Standards and Technology (NIST) released new guidelines on defending against various software supply chain risks. By Alicia Hope I May 10, 2021