The Prime Ministers of Australian and New Zealand Governments have confirmed that a cyber attack on either country could trigger article 4 of the ANZUS treaty. “We reaffirmed that international law applies in cyber space and that a cyber…
Thanks for posting @Thaddeus Dziekanowski, ransomware is a nice little earner. The enclosed report pulls together some of the industry stats on ransomware attacks. History has shown that the dark side of cyber has evolved into a very profitable business,…
If correct, Haliburton is working through a cyberattack impacting business operations. While little is yet known, Haliburton is a significant player in U.S oil extraction and an attack on business operations has implications on supply. “We are aware of an…
Auditors be aware. The SEC has approved 2 PCAOB proposals updating audit standards regarding general responsibilities of the auditor and use of technology-assisted analysis in conducting an audit. Also approving a proposal amending ethics rules governing the liability of an…
Boards cannot manage cybersecurity without good board governance. Boards need to be prepared under the continually increasing threat of cyber attack and ICT risks, and regulatory environment to oversight, assure and attest cyber risk. In turn requiring boards demonstrate governance…
Apologies a little late. This post focuses on remarks made by the SEC director of enforcement Gurbir Grewal back in April 2024, that are pertinent to the role of the Chief Compliance Officer(CCO), Chief Information Security Officer (CISO) the management…
A proposed DFARS 252.204-7021 or CMMC as its become known rule, has been published on the Federal Register. Meaning covered defense contractors globally must 1. Have a current CMMC certificate or self-assessment at the requisite CMMC level, or higher. 2.…
Watch this and just think, no ropes, no guard rails, no stunt man, no camera and in any weather. Watch at 3 minutes 30. He’s 300 feet up and being paid $7000 to take the whole stack down. As an…
It’s just the regulation that keeps on giving. One wonders if there are lessons to be learnt between the SECs regulatory enforcement actions over the use of private communication channels by investment companies and asset managers, and it’s Final Cyber…
Those pesky nation state threat actors, using cybersecurity as a weapon………. Ukrainian security forces are focused on Russian CNI, this time targeting Vega, a Russian ISP. With a knock on effect of knocking out 1173 of the provider’s switches and…
