SANS Cyber Compliance Countdown

As we head into the last quarter of 2023, three major mandate changes are occurring, each positioned to make a large impact on how businesses, governmental bodies, and critical sector organizations operate. The goal of the SANS Cyber Compliance Countdown is to focus on what you need to know in these complicated and broad requirements and to offer solutions on how to meet these directives.

Below is a quick overview of the changes and this forum dives into what exactly you need to do to maintain compliance.

1. SEC's Mandate: Unveiled in August and set to be enforced by December 18th, signifies a pivot in reporting cybersecurity incidents. The mandate makes it imperative:

To report any cyber incident.
For management and security teams to not only possess cyber expertise but also ensure board reporting. Does this also involve consulting with outside counsel? Let’s find out.
To produce a Cyber Report, sculpted along the lines of a Financial Report, presenting a transparent picture of an entity’s cyber health.

2. DoD 8140.3: Signed in February with certification/training/education options slated for release this December, the DoD8140.3 mandate will be enforced by February 25 for cyber and February 26 with IT personnel.

Any individual within the DoD, including contractors, allied nations, and a staggering number between 350-400K of military personnel alone, must validate their cyber skill set.
Compliance and validation of cybersecurity skills are non-negotiable.

3. NIS II Directive – Europe's Cyber Beacon Heralded as potentially the next GDPR, the EU-based NIS II Directive, released in the 1st Quarter of 2023, calls for compliance by October 24.

Any Critical Sector Organization and country, emphasizing the broad spectrum of its applicability.
ICS and incident reporting, signaling a drive towards a more fortified, responsive cyber environment.
A focused effort on building and nurturing a cybersecurity workforce that's equipped for tomorrow's challenges.

Join us this November as we dissect these mandates and provide insights and strategies to ensure your organization remains a step ahead in compliance.