Augusta Plan 3.0 – Harmonising Cyber Risk Management Between US Federal Agencies And Their Allies

Managing cybersecurity risk is a significant issue for public and private sector organisations globally. To the extent that regulators are moving rapidly to develop and implement cybersecurity risk management legislation, regulations and regulatory enforcement programs. Cybersecurity risk management programs that need to be aligned globally to facilitate national sovereignty, national and international security. Data is a critical asset for all nations and an asset that is shared nationally and internationally. Nations operate under different cybersecurity frameworks, standards and practices and failure to consider these differences results in nations applying different levels of cybersecurity controls and security to their own and their partners’ data. Failure to harmonise cybersecurity risk management practices hurts national security and international trade. There exist mechanisms to facilitate the international harmonisation of cybersecurity regulations and the setting and agreement of common baseline cybersecurity protection profiles. That facilitates standardised, qualified and trusted oversight and assurance and attestation of cybersecurity. We discuss in brief the approach in the enclosed paper.