Horse, bolted comes to mind. Aren’t tech vendors meant to implement secure by design and zero trust? @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity #cyberriskmanagement View Original Post
The insurance industry is predicted to withstand losses following Fridays Crowdstrike incident. 2024 has seen several major technology and cyber incidents that one could consider significant. Fitch does not believe preliminary lossess will be material. The challenge will be consequential…
How does industry protect itself from threats such as this? @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC ##cybersecurity #cyberriskmanagement View Original Post
The UK has less than 3 years to resolve its cybersecurity deficiencies. Cyber is a major risk to national security, a domain of operation that is growing in significance, beyond Kinetic warfare. Chris Wrey presented to several house committees this…
Yes, cyber will be, should be, the biggest concern to the Insurance industry. One would suggest that ICT risk, such as that experienced last week, combined with cyber will be big enough risks to capital that insurers will leave the…
Of course, these events will continue until boards enhance their oversight and assurance of ICT risk. The fallout from the Crowdstrike incident illustrates those impacted will likely bear a significant portion of the incident remediation costs themselves. Highlighting the challenges…
That pesky data security problem and national security. What are we to do? @Thaddeus Dziekanowski Veritas GRC #cybersecurity #datasecurity ##nationalsecurity View Original Post
Cyber experts did not fail. Crowdstrike was never an issue that could have been managed by anyone other than Crowdstrike. While all the ‘snake oil’ starts flowing. There are.many Crowdstrike type events ahead, it’s not a unique threat. Could someone…
Really…….cloud strategy is not what the tech community needs to focus on with respect Cloudstrike. CloudStrike was not a cloud problem. Cloudstrike was a third party supplier problem, that it turns out required contracts to compensate users for the loss…
Does anyone think that the situation is going to get any better? We could have started to address ICT risk across industry 5 years ago. Does anyone have a solution to the problem. It would be good to hear some.…
