axio - kn

With the start of the FIFA Women’s World Cup football (soccer, for my American friends) tournament just prior to last weekend, thoughts generally will be on the skills on display as national pride does sporting combat on the pitch – and hopefully less on the decisions of the VAR system or the strange prevalence of penalties in most of the matches thus far. Televised to a global audience, big sporting events like these offer an incredible opportunity to not only celebrate one’s own team, but also learn more about others’ cultures and approach to life – even if it’s as simple as recognising the flag of Haiti when called upon at a pub quiz, or the querying of an inquisitive child who believes all adults know all things.

Almost all of us spend big chunks of our lives online, either on laptops or tablets earning our daily bread, or perhaps diligently ignoring the rest of the planet on the underground or in a coffee shop whilst getting our dopamine hit from vicariously living through the staged happiness of others via the social media provider de jour. But, picture this: a cyber attack that goes beyond digital mayhem and delves into the realm of tangible destruction. In a display of the consequences of such intrusions, critical infrastructure systems become the unwitting victims owing to vulnerabilities lurking in interconnected networks, software, or hardware components.

New York, June 15, 2023 – Axio, the leader in cyber risk management software, today announced three key additions to support rapid customer adoption and significant global growth. Former President and CEO of Ecopetrol, Felipe Bayón joins as a special advisor to help bolster the company’s leadership position in the energy, manufacturing and infrastructure industries, specifically emerging markets. Additionally, the company announced two key executive hires. Peter Armstrong joins as Senior Vice President (SVP) Risk Engineering and Risk Capital to help build out Axio’s collaboration with the cyber insurance industry. Alfredo Narez joins as SVP, Head of Marketing to elevate Axio’s brand awareness, outbound efforts, and drive the company’s go-to-market strategy.

A cybersecurity architecture design review (CADR) will help you fight ransomware. The TSA is now requiring these assessments for more and more critical infrastructure entities, given today’s cyber threat landscape. Our article provides a 101 on CADR assessment from ideation to execution, which has become a high demand offering from our professional services team, performed in close collaboration with our partner 1898 & Co.

The TSA is now requiring railroad owners and operators to perform cybersecurity architecture design reviews (CADR). In this blog, we discuss why this new assessment is an important initiative to improve railroad cybersecurity, and how Axio can help you fulfill this new requirement with our partner 1898 & Co.

The Securities and Exchange Commission (SEC) released its final rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure on July 26, 2023. This gives organizations approximately five months to confirm compliance plans before the new disclosure requirements take effect in mid-December. One of the important elements of the new disclosure requirements emphasizes the need for strong cyber governance.  Specifically, applicable public organizations will have to describe the company’s governance of cybersecurity risks as it relates to:

As an organization specializing in risk management, we’ve seen the devastating consequences of cyber-attacks. Readiness and the ability to minimize the consequences of the inevitable event are keys to survival. From day one, Axio’s vision was to solve cyber risk by ensuring that the impact of successful attacks would never end an organization’s existence, let alone impact it more substantially than any other known and managed risk.

If you’re involved in the defense industry or work with the U.S. Department of Defense (DoD), you’re likely familiar with the Cybersecurity Maturity Model Certification (CMMC). In our previous blog post, Getting Ahead of CMMC in 2023, we explored a brief history of the model and why compliance will ultimately become a requirement. The latest version, CMMC 2.0, brings significant updates and changes to the previous version, 1.0. Whether you’re a contractor, subcontractor, or a professional seeking compliance with CMMC requirements, here are the top 10 things you need to know about CMMC 2.0

CMMC 2.0 is a major update to the previous version, CMMC 1.0, and introduces three distinct maturity levels that contractors must achieve to bid on DoD contracts. In our first blog post in this series on CMMC, we discussed its brief history, pushbacks and roadblocks, and why compliance will ultimately be a requirement. In this blog post, we will explore the three levels of CMMC 2.0 in detail, including what each level involves, the requirements for achieving each level, and the implications for cybersecurity practitioners.

The Cybersecurity Maturity Model Certification (CMMC) was established in 2020 by the United States Department of Defense (DoD) as a unified cybersecurity standard for all contractors who provide goods and services to the DoD. This standard has evolved over time due to the need for tighter cybersecurity measures, particularly in light of the increasing number of cyberattacks on government organizations and private companies. In this introductory article, we will explore the history of CMMC, why it was necessary, how it has evolved since 2020, pushback and roadblocks, and ultimately why it will be a requirement.