There are few choices on the table for boards to manage cyber risk. Boards have to considered cyber as an investment and not a cost. Until that situation changes, history shows there will be little change. Boards face several challenges,…
There is only one direction for cybersecurity risk management. For Cybersecurity risk to be economically managed it has to be treated ‘Left of Bang’. Cyber has to be treated as an investment, not ‘Right of Bang’ with cyber treated an…
U.S water trade associations reaffirm their responsibility to manage cybersecurity threats, and the need for consistent reporting of cyber incidents. They seek clarification on and harmonisation of terminology that defines a water utility and the scope of coverage of water…
@Thaddeus Dziekanowski a great article in the Japan Times on corporate governance, and its move up the board agenda. Across many jurisdictions globally, as investors move to consolidate influence over their investments. With Japan increasingly the focus of activist shareholders.…
A great article that brings out some of the challenges that maybe ahead for Federal Agencies and courts in determining cybersecurity. We are hearing allot about the impact of the recent Supreme Court ruling on the Chevron Deference, and the…
The cyber attack on the U.S third party software supplier to the U.S automotive industry highlights the challenges that single sourced suppliers present to supply chains. CDK attack prompted some public dealers to inform their shareholder and the SEC, of…
Always positive to hear of the efforts law enforcement in reducing the threat posed by cybersecurity. Society faces very difficult choices with managing cybersecurity. Traditional approaches to managing cyber risks do not work, one suspects that in this case the…
So it turns out the courts did jettison the Chevron Deference. Now for the courts to get up to speed on the technicalities of cyber regulation? @Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Veritas GRC #cybersecurity #cyberriskmanagement…
Is the recent ruling by the US Supreme Court on the Chevron Deference going to have any effect on cybersecurity regulatory compliance in the U.S? While the Chevron deference instructed lower courts to defer to expert Federal agencies in the…
One wonders if the class action filled against Prudential Financial following their data breach claimed by BlackCat earlier this year is going to change? The company announced the original figure of 37,000 effected customer has been revised up to 2.5…
