Yesterday I published an article from the WSJ on the need for Western governments to harmonise cybersecurity regulation. This is why the U.S, EU and UK should be concerned about cybersecurity harmonisation. Since Australian’s suffered significant cyber attacks on Critical…
Australia set the standards for cybersecurity following NIST. The Australian Cyber Security Centre (ACSC)Â manages the standards on behalf of the Australian Government The manual details the cyber security framework that organisations can apply, using a risk management framework. The EU…
A great read, and to take 2 well used metaphors, ‘The horse has already left the stable’, and ‘We’re fighting the last war’. Ted Dziekanowski and I have written extensively about the need for international harmonisation across cyber. Incident reporting…
Lapsus$ the teen hackers that shone a spot light on some major brands in 2022 will be the focus of a Department of Homeland Security review. The lapsus group demonstrated that international script kiddies, a euphemism that belayed the severity…
This week I attended a presentation in London given by the Deputy Director of the NSA George Barnes and members of CISA. CNI cybersecurity is a subject that is of concern given our dependence on the energy grid and the…
The House of representatives have signed off on the $858Bn NDAA for 2023. There’s a significant focus on cyber, including the establishment of Bureau of Cyberspace and Digital Policy within the Department of State, to be headed by an Ambassador and…
A great report by the Harvard Law School Forum on Corporate Governance. Assessing the cybersecurity preparedness of the Russell 3000 companies, ahead of the expected release in Quarter 1 2023 of the SEC proposal on cybersecurity risk management governance, strategy…
The U.S DoD CMMC program has had a bumpy ride ahead of the proposed rule change next year and implementation of CMMC into the contracting process. A significant issue for CMMC and DFARS compliance has always been creating enough assessors…
Ted Dziekanowski one often forgets about the SEC cybersecurity risk management proposal written to address Fund managers and advisors issued February 2022. (). But we should not forget there’s already SEC regulation in place under regulation S-ID to protect client…
Ted Dziekanowski it’s not just cyber regulators who are driving cyber security left to a proactive risk based approach to create situational awareness and improve resilience, as CISA looks to be moving further ‘Left of Bang’. One wonders if Federal government…
