A theroetical concept, it is a score that is impossible to calculate for so many reasons. You cannot score cyber, you just have to manage it, by reducing the effects of the risk. If we argue that over 99% of…
A timely reminder by the SEC of the importance of management’s and auditors responsibility over risk assessment processes, and the effectiveness of internal control over financial reporting (ICFR). Timely, as the SECs Final Cyber ruling is effective the 5th of…
Another state of cyber insurance update. One has to consider how many companies have cyber insurance, that is a difficult number to quantify. We do no that 99% of all organisations are SMEs. That generally can’t afford cyber insurance, or…
Question, has the role of the CISO failed? As someone who is and has been in both 1st and 2nd line cyber roles including CISO and Cyber risk………………no the role of the CISO has not failed. Roles don’t fail because…
Thank you Rachel V. Rose, JD, MBA for sharing. This is an important announcement for U.S Federal Contractors by U.S Rep. Nancy Mace (R-S.C.), chairwoman of the House Oversight and Accountability Committee’s cybersecurity, information technology and government innovation subcommittee. Who…
One always appreciates a cyber insurance industry update. Are we in a hard, market, a soft market, a stable market or one that is fluctuating? It is always difficult to tell. What reports do tell us for July is that…
Olaf Classen, this looks to be a significant issue and a further example of the challenges open source and freeware software integration presents. From what I understand unrar.dll or unrar64.dll is integrated into over 400 applications. By example a zero…
Great to see you discussing the SEC Final Ruling Brian Walker as the debate around the ruling grows, and the role of corporate governance, the 3 line of defense and requirements for management oversight, assurance and attestation develop. Ted Dziekanowski…
Thank you for posting Olaf Classen. There is little one can add to this other than question Ivanti’s Security SDLC. Was cybersecurity considered when the products were developed, did the company go through code reviews or security testing? Given the…
This has to be one of the most significant cloud cyber incidents in the past couple of months. As the Danish cloud vendor CloudNordic had all its and its clients data wiped in a cyber attack. The incident occurred after…
