Business911 International, Inc.

NIST Releases Update to Cybersecurity Framework

Credit: Natasha Hanacek/NIST

 

The National Institute of Standards and Technology (NIST) has issued a draft update to the Framework for Improving Critical Infrastructure Cybersecurity—also known as the Cybersecurity Framework. Providing new details on managing cyber supply chain risks, clarifying key terms, and introducing measurement methods for cybersecurity, the updated framework aims to further develop NIST’s voluntary guidance to organizations on reducing cybersecurity risks.

Full article: https://www.nist.gov/news-events/news/2017/01/nist-releases-update-cybersecurity-framework

CMS Issues New Emergency Preparedness Rule

Survey & Certification- Emergency Preparedness Regulation Guidance

Guidance for Surveyors, Providers and Suppliers Regarding the New Emergency Preparedness (EP) Rule

On September 8, 2016 the Federal Register posted the final rule Emergency Preparedness Requirements for Medicare and Medicaid Participating Providers and Suppliers. The regulation goes into effect on November 16, 2016. Health care providers and suppliers affected by this rule must comply and implement all regulations one year after the effective date, on November 16, 2017.

Full article: https://www.cms.gov/Medicare/Provider-Enrollment-and-Certification/SurveyCertEmergPrep/Emergency-Prep-Rule.html

Securing Tomorrow’s Software

Today, the Department of Homeland Security (DHS), in collaboration with the Mitre Corporation, released the Common Weakness Enumeration version 2.0 (or CWE v2) – a dictionary of software weaknesses and their associated mitigation practices developed by the experts from government, industry and academia from across the software security community.

http://blog.dhs.gov/2011/06/securing-tomorrows-software.html

NIST issues second draft on Smart Grid Cyber Security

The U.S. National Institute of Standards and Technology (NIST) has issued the second draft of its Smart Grid Cyber Security Strategy and Requirements, which now identifies more than 120 interfaces that will link diverse devices, systems, and organizations engaged in two-way flows of electricity and information and classifies these connections according to the risks posed by a potential security breach.

House Closer to Sparing Small Firms From Audit Costs of Sarbanes-Oxley

Lawmakers today defeated 271-153 an effort to remove an exemption from legislation overhauling Wall Street regulation. The bill retains language letting companies with market values less than $75 million avoid complying with the Sarbanes-Oxley Act’s audit requirements.

http://www.bloomberg.com/apps/news?pid=20601103&sid=a.I8GCzSWwRM

Supreme Court Considers Sarbanes-Oxley Board

December 7, 2009

The U.S. Supreme Court hears arguments on Monday testing the constitutionality of the federal anti-fraud law that grew out of the Enron scandal. At issue is the constitutionality of the board Congress created to oversee independent audits of publicly traded companies.

http://www.npr.org/templates/story/story.php?storyId=121146830&ps=cprs

SCADA vulnerabilities - Sabotaging the System

Very good 60 minutes clip on Cyber Security provides insight into current threats.  Could hackers get into the computer systems that run crucial elements of the world's infrastructure, such as the power grids, water works or even a nation's military arsenal? See clip: http://www.cbsnews.com/video/watch/?id=5578986n&tag=contentMain;cbsCarousel

Information protection solutions

Business911 provides a cost-effective, common-sense approach to information protection.  Our services include:

Information Technology Governance

Cyber Security

 

Business Process Controls

 

Organizational Resiliency