BSI Consulting’s Post

Are you subscribed to the Experts Corner-2-Go newsletter? Every two weeks, our readers receive a diverse range of industry insights from our experts across supply chain, environmental, health & safety, sustainability, and cybersecurity. Check our latest issue and subscribe: https://bit.ly/3zTbaB6 #BSIExpertsCorner #supplychain #digitaltrust #EHS #industryinsights #BSIUSA

Are you subscribed to the Experts Corner-2-Go newsletter? Every two weeks, our readers receive a diverse range of industry insights from our experts across supply chain, environmental, health & safety, sustainability, and cybersecurity. Check our latest issue and subscribe: https://gag.gl/33N2cV #BSIExpertsCorner #supplychain #digitaltrust #EHS #industryinsights #BSIUSA

When creating cybersecurity rules, government agencies need to be careful about the standards and definitions they choose, particularly in an evolving field like cybersecurity. There's a great article (link below) about what happens when agencies rely upon existing frameworks or rules that weren't originally designed for regulatory purposes. This approach can create complications: - Standards may evolve, leading to ambiguous regulations. - In some cases, these standards could be outdated or not applicable to the current context. The Role of Third-Party Standards Agencies often adopt standards developed by external groups when they need detailed technical guidelines. This practice is widespread: - For instance, environmental rules might use state standards that the EPA then adopts. - The FAA might incorporate external information like aircraft service details or maps. These external standards originate from industry groups or non-governmental organizations. They influence product design and operational processes in various sectors, covering areas from workplace safety to the design of ventilation systems. Challenges with Dynamic Incorporation The concept of "dynamic incorporation," where the latest version of a standard is automatically adopted, presents challenges. The law requires regulations to specify which version of a standard they are using to avoid confusion. CISA, the DoD, and other agencies must avoid this to prevent contractual problems. Looking Forward Recognizing the potential challenges is crucial: - Regulations need clarity and consistency. Continuous changes or unclear rules can make compliance difficult for companies. - Enforcement should be reasonable. Companies making honest efforts to comply should not face severe penalties for minor errors. #cybersecurity #risk #compliance #longread

#Supplychain now usually includes many levels of #suppliers going all the way back to the farms and mines providing the original material. How can we keep track of all the #risks and #traceability needed to maintain a safe, ethical, and secure operation? #Procurement provides a major tool to ensure responsive and risk-mitigated supply. #Sustainability, #ethics, and #cybersecurity are the beginning of risk management through a transparent and connected network.

Hi all, just an update to the ISO standards! Clause 4.1 & 4.2 of • ISO/IEC 27001:2022/Amd 1:2024 Information security, cybersecurity and privacy protection. Information security management systems. Requirements Amendment 1: Climate action changes. AMENDMENT 1: Climate action changes 4.1 Add the following sentence at the end of the subclause: The organization shall determine whether climate change is a relevant issue. 4.2 Add the following note at the end of the subclause: NOTE Relevant interested parties can have requirements related to climate change. These changes were released by ISO on 23 February 2024, you can access copies of this amendments via this link (https://hubs.ly/Q02m958k0). The download is free as long as you have a free ISO account.

Digital transformation - cyber security - EU's NIS2 Directive and companies obligations A 2-minute read for a quick overview of this topic 🤓 #Elatec #RFIDTechnology  Advanced authentication solutions ✅

Did you know 87% of small businesses are vulnerable to cyber threats? 😱 With Zones Security Assessments, we're here to ensure that every vulnerability is identified, empowering you to fortify your security infrastructure and mitigate risks effectively. 🛡️ https://hubs.li/Q02mCwbb0 #CyberSecurity #ZonesSecurity #DataProtection #ConsiderITDone #FirstChoiceforIT

As Facilities Managers navigate through the complexities of 2024, staying ahead of evolving legislation and ensuring compliance is more critical than ever. John Greenough of Veriforce CHAS highlights five key areas to watch. Key Highlights: 🔹 Adapting to the new Fire Safety (England) Regulations 2022 requires a deep understanding of fire risks and comprehensive assessments. 🔹 The rise in Health and Safety fines emphasises the need for meticulous policy reviews and role clarity. 🔹 The growing importance of financial diligence and information security cannot be overstated, with technology integration posing new challenges. Embrace these insights to fortify your strategies and ensure your facilities are compliant and ahead of the curve. Read the article here: https://lnkd.in/e7ckHDqj #FacilitiesManagement #RiskManagement #Compliance #FireSafety #HealthAndSafety #CyberSecurity

Did you know 87% of small businesses are vulnerable to cyber threats? 😱 With Zones Security Assessments, we're here to ensure that every vulnerability is identified, empowering you to fortify your security infrastructure and mitigate risks effectively. 🛡️ https://hubs.li/Q02mCwbb0 #CyberSecurity #ZonesSecurity #DataProtection #ConsiderITDone #FirstChoiceforIT

From cybersecurity threats to supply chain disruptions, every organization faces risks. Discover practical strategies to assess and manage these risks while promoting environmental stewardship. https://lnkd.in/gbdy_b69 #YanksonConsult #RiskManagementMonth #Sustainability #BusinessResilience #LinkedInCommunity