Los estados est\u00e1n asumiendo cada vez m\u00e1s amenazas de ciberseguridad, como muestran estas nueve iniciativas dirigidas por gobiernos de todo el mundo. Las iniciativas de ciberseguridad lideradas por los\u00a0gobiernos\u00a0son acciones para abordar problemas de ciberseguridad como ataques destructivos, violaciones masivas de datos, mala postura de seguridad y ataques a infraestructura cr\u00edtica.<\/p>\n
Cybersecurity has steadily crept up the agenda of governments across the globe. This has led to initiatives designed to address cybersecurity issues that threaten individuals and organizations.<\/p>\n
\u201cGovernment-led cybersecurity initiatives are critical to addressing cybersecurity issues such as destructive attacks, massive data breaches, poor security posture, and attacks on critical infrastructure,\u201d Steve Turner, security and risk analyst at Forrester, tells CSO. \u201cThese initiatives provide consistent guidance on how organizations and consumers can protect themselves, provide services to companies that don\u2019t have the knowledge or monetary means to protect themselves, legislative levers that can be utilized, means of taking offensive actions against nation state adversaries, and most of all investigation of significant cyber incidents paired with critical information sharing during or after those incidents.\u201d<\/p>\n
Here are some of the most notable cybersecurity initiatives introduced by governments around the world in 2021:<\/p>\n
US Department of Defense publishes Cybersecurity Maturity Model Certification<\/strong><\/p>\n In January, the US Department of Defense (DoD) released the\u00a0Cybersecurity Maturity Model Certification<\/a>\u00a0(CMMC), a unified standard for implementing cybersecurity across the defense industrial base (DIB), which includes over 300,000 companies in the supply chain. The CMMC reviews and combines various cybersecurity standards and best practices, mapping controls and processes across several maturity levels that range from basic to advanced cyber hygiene.<\/p>\n \u201cFor a given CMMC level, the associated controls and processes, when implemented, will reduce risk against a specific set of cyber threats,\u201d reads the\u00a0Office of the Under Secretary of Defense for Acquisition & Sustainment website<\/a>. \u201cThe CMMC effort builds upon existing regulation (DFARS 252.204-7012) that is based on trust by adding a verification component with respect to cybersecurity requirements.\u201d The CMMC is designed to be cost-effective and affordable for all organizations, with authorized and accredited CMMC third parties conducting assessments and issuing CMMC certificates to DIB companies at the appropriate level.<\/p>\n For Tom Brennan, CIO at Mandelbaum Salsburg P.C. and US chairman of CREST, the CMMC is perhaps the most important government cybersecurity initiative of 2021 in the US. \u201cFor a long time, the DoD has told DIB contractors that they have to comply with NIST standards, but there has been zero accreditation, enforcement, or audit associated with this particular control, and it has failed miserably,\u201d he tells CSO. The CMMC is so important because it involves legal assessments to test that government contractors are doing what they say they are from a security standpoint, and if they fail to meet CMMC requirements, they will lose their contracts, he says.<\/p>\n