Between 12:15ET and 12:45ET on March 28th Ryan Buckner and I will be hosting a lunch and learn, discussing the recently signed MoU between Veritas GRC and Schellman. To create and deliver board cybersecurity risk management education programs to the…
A speech by the chair of the Securities and Exchange Commission Gary Gensler, favoring and justifying mandatory disclosure. ‘The basic bargain that President Franklin Roosevelt and Congress laid out 90 years ago was that investors get to decide which risks…
Cybersecurity risk management regulation is a challenge public and private sector firms will have to face. Regulators in the United States and European Union are moving ahead with enforcement regimes, requiring boards of organisations operating in or with the U.S…
One must not underestimate the authority of the Office of Personnel Management (OPM) in shaping the future of cybersecurity risk management in the U.S. The OPM sets the HR strategy for Federal government and in this case is pitching a…
@Thaddeus Dziekanowski, the insurance industry is concerned about the systemic risk that AI poses. AI presents many challenges to the insurance industry, it is a tool that accelerates the development of current risks, creates new risks and can be a…
The issue is not one of ‘Has the EU left the UK behind on AI regulation’, the issue at hand is ‘Has the EU left the UK behind on Cybersecurity Risk Management regulation’, why? You cannot and should not regulate…
An important read, in what is a positive step. The U.S and EU governments announce they are working together to harmonise cyber incident reporting. The Department of Homeland Security (DHS) and European Commissions Directorate General for Communications, Networks, Content, and…
Well worth a read. Cybersecurity is a national and international problem, requiring international collaboration. Harmonization of cybersecurity risk management regulation, strategy, governance, education and standards. All of which are important if we are to securely manage global trade, national and…
A survey report by the UK government on the status of cybersecurity of UK industry, as part of its continual oversight of the status of cybersecurity risk management. Statistics of cybersecurity compliance always make for an interesting read as they…
Are companies adopting a conservative approach to cybersecurity risk management reporting. Or are they taking a safer line with 8K filings for the time being. As the regulator has not yet clearly responded to the information that it has been…
