We speak about the focus of U.S and EU regulators on cybersecurity risk management. We can now add a significant regulator to that conversation, as the U.S Commodities Futures Trading Commission (CTFC) Division of Enforcement has announced the creation of…
Ted Dziekanowski, cyber insurance sits ‘right of bang’ as a risk transfer tool, supporting organisations manage cyber post incident. It is interesting to see that some from the cyber insurance industry are making it clear that â¬ÅNeither insurance nor reinsurance…
Legal actions are lining up against Medibank with the 4th class action. coming at ta time when the Australian Prudential regulator requires Medibank to add $250 million Aus in regulatory capital to its balance sheet. ‘The latest class action alleges…
The recent SEC Wells notices issued against SolarWinds are starting to be digested by the Security community, with some calling the move by the SEC as unprecedented. Sending a very clear message to the security community that the regulator is…
A great article. Cybersecurity is a continuum, it is not a defined state of success or failure. While one has sometimes used the term ‘cyber war’, there should be a recognition that cybersecurity and risk management is a continual process.…
An important read for those organizations, their boards and security professionals working in or with SEC registrants. The SEC Director of enforcement Gurbir S. Grewal speaks at an FT Cyber Resilience Summit about the paradigm shift from cybersecurity to cyber…
U.S and EU capital markets and regulators are rightly focused on ESG, as demand grows for socially conscious investment strategies. Highlighting the close relationship between capital and corporate social responsibility. One should also be concerned about the link between capital…
We are waiting for the DoD and U.S Federal Government to release DFARS 252.204-7021 formally and FAR part 32 and DFARS part 48. In response to the extended time line for CMMC the DoD has released the enclosed 2 page…
The UK governments cybersecurity center NCSC has refreshed its cybersecurity risk management framework. Including a risk methodology aligned with ISO 27005. Facilitating a more structured approach to cybersecurity risk assessment, quantification and management. Released at a time when global regulators…
Thank you for posting Ted Dziekanowski. CISOs should not be roiled with the action taken by the SEC against SolarWinds. The SEC has the obligation and regulatory duty to oversight and assure corporate management of material risk, and it has managed…
