As posted yesterday the travel industry is a sector that is facing challenges with its cybersecurity, as the latest visible casualty of cyber attacks (). It’s a sector dependent upon technology, one that is little prepared and one where the…
I’ve seen the ‘Knights of Old’ on the road over the UK for many years, a family firm founded in 1865. It is sad to hear that they have gone bust following a cyber attack on their parent. We hear…
Starting this month the DoD IG is going to audit the CMMC program. This is an important audit given the impact of the program on the U.S Defense Industry Base (DIB). Progress towards the implementation and oversight of DFARS 252.204…
The effects of cyber seem to get just about everywhere, and the travel industry is no exception. Automation is a big deal for the industry from airlines, through hotels and resorts, as we have seen recently with MGM and Caesars…
The U.S Cybersecurity and Infrastructure Security Agency (CISA) has released a Hardware Bill of Materials Framework (HBOM), for Supply Chain Risk Management (SCRM). The framework provides a baseline document for organizations to identify and name assets across their supply chains.…
Thank you for posting Ted Dziekanowski. One has always questioned the inertia of boards to address cybersecurity risk management, and these figures support the view that boards are not ready to address cybersecurity regulation. We have written many times about…
The UK Financial Conduct Authority issued a dear CEO letter to the insurance market last week. A letter that discussed Putting consumers’ needs first and the regulators wish for firms to demonstrate that products meet customers needs and provide value.…
The SEC final rule sets out clear accountabilities and responsibilities for cybersecurity risk management oversight, assurance and attestation by boards, board subcommittees and accountable executives. As the Uber case demonstrated the CISO is an accountable executive. The board will be…
The well documented collapse of Carillion in 2018 is an example of the failure to provide adequate financial oversight and assurance. The directors of Carillion have faced fines and board room bans, in a scathing report on the company’s corporate…
The EU has taken a broad integrated approach to cybersecurity risk management regulation. Be that through the EU Cybersecurity Act, EU NIS 2 Directive, Digital Operational Resilience Act (DORA), the Resilience of Critical entities Directive, the proposed Cyber Resilience Act…
