Call us now:
Simone Herbert-Lowe opens up another regulatory lens focused on cybersecurity risk management. Highlighting the direction of travel being taken by the Australian Securities and Investments Commission (ASIC) on corporate governance, oversight, and assurance of cyber risk in the boardroom of covered companies.
Globally, the ASIC is in good company. Covered entities are required to demonstrate compliance with cybersecurity under Basel Accords, NYDFS 500 is maturing cyber regulation in New York, the EU has regulated FIs under DORA and NIS 2. On the 31st January 2026, the Abu Dhabi Global Market (ADGM) regulator requires covered companies to implement cybersecurity risk management, the Securities and Exchange Commission introduced its final cyber rule back in 2023, and the US DoW cyber program CMMC becomes effective this coming Monday. Cyber is a regulated requirement for boards, requiring them to demonstrate governance, oversight, and assurance of risk or face civil and/ or criminal penalties on one hand, and customer, investor, shareholder, and government oversight on the other.
So Directors and Officers take note. There’s existing enforcement precedence; cyber maturity across many sectors is at best poor; we do not have enough cyber resources to manage cyber risk, and cyber is now a legal and compliance risk.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7392913255217713152