axio - kn

The Securities and Exchange Commission (SEC) released its final rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure on July 26, 2023. This gives organizations approximately five months to confirm compliance plans before the new disclosure requirements take effect in mid-December. One of the important elements of the new disclosure requirements emphasizes the need for strong cyber governance.  Specifically, applicable public organizations will have to describe the company’s governance of cybersecurity risks as it relates to:

As an organization specializing in risk management, we’ve seen the devastating consequences of cyber-attacks. Readiness and the ability to minimize the consequences of the inevitable event are keys to survival. From day one, Axio’s vision was to solve cyber risk by ensuring that the impact of successful attacks would never end an organization’s existence, let alone impact it more substantially than any other known and managed risk.

If you’re involved in the defense industry or work with the U.S. Department of Defense (DoD), you’re likely familiar with the Cybersecurity Maturity Model Certification (CMMC). In our previous blog post, Getting Ahead of CMMC in 2023, we explored a brief history of the model and why compliance will ultimately become a requirement. The latest version, CMMC 2.0, brings significant updates and changes to the previous version, 1.0. Whether you’re a contractor, subcontractor, or a professional seeking compliance with CMMC requirements, here are the top 10 things you need to know about CMMC 2.0

CMMC 2.0 is a major update to the previous version, CMMC 1.0, and introduces three distinct maturity levels that contractors must achieve to bid on DoD contracts. In our first blog post in this series on CMMC, we discussed its brief history, pushbacks and roadblocks, and why compliance will ultimately be a requirement. In this blog post, we will explore the three levels of CMMC 2.0 in detail, including what each level involves, the requirements for achieving each level, and the implications for cybersecurity practitioners.

The Cybersecurity Maturity Model Certification (CMMC) was established in 2020 by the United States Department of Defense (DoD) as a unified cybersecurity standard for all contractors who provide goods and services to the DoD. This standard has evolved over time due to the need for tighter cybersecurity measures, particularly in light of the increasing number of cyberattacks on government organizations and private companies. In this introductory article, we will explore the history of CMMC, why it was necessary, how it has evolved since 2020, pushback and roadblocks, and ultimately why it will be a requirement.

Given increased geopolitical tensions and economic uncertainty in Europe, cyber-attacks are top of mind for legislators. The Russia-Ukraine war has brought attention to the devastating impact malicious threat actors can impose on critical infrastructure.

In part 1 of this blog series we discussed compliance firefighting. We mentioned that a proactive approach can reduce the amount of fires and save costs in the long run. In this part we’ll dive into the details and show how you can produce better security as an output from your compliance efforts.

Critical infrastructure is a clear target for cyber adversaries. It includes all assets necessary to keep a society functioning, such as our power grid and water systems, which are vital to the well-being of citizens, the community and the economy. The energy sector is heavily interconnected and an attack on the power grid can leave a significant impact. Adversaries’ attempts on OT systems enables them to use technology to carry out a physical attack that can impact national security. Cyber-attacks on our critical infrastructure have accelerated during COVID-19, leading to an increased implementation of standards like NERC CIP. Scrambling to comply with standards like NERC CIP, organizations often find themselves compliance firefighting.