Well worth a read. The EU council announced on the 11th of May 2022 that it had reached an agreement for its Digital Operational Resilience Act (DORA), that will impact EU FIs and require the oversight and assurance of ICT…
The U.S. Department of Justice has updated its policies for charging case under the Computer Fraud and Abuse Act, allowing legitimate white hacking. Urging prosecutors not to bring cases against legitimate cybersecurity researchers under main U.S. anti-hacking law, enacted in…
A little left field for cybersecurity. The enclosed demonstrates that the SEC pursues companies that violate the Securities and Exchange Act 1934, make fraudulent claims that have an impact on a companies ‘books and records’. In this case Fiat Chrysler…
Nostradamus calls it Ted Dziekanowski. CISA has aligned itself to CSF profiles for some time across many industry sectors. The SEC and EU is proposing cybersecurity risk management regulations that require a cybersecurity risk management framework; FISMA is aligned to…
The Geopolitical debate on cyber seems to be a hot topic. The Washington Post debates Securing Cyberspace with U.S Congress Representative Michael McCaul, Republican of Texas, and Representative Elissa Slotkin, a Democrat of Michigan. They discuss the lack of rules…
Last night the UK Attorney General Set out the UKs position on cybersecurity, international law and the need for a clear framework for cybersecurity, that make clear when state action is unlawful. Treating a cyber-attack the same as a physical…
Should Chief Compliance Offices (CCO) be held accountable for failures in corporate governance, that participate in Securities Law violations? Could the same apply to CISOs for failure to comply with cybersecurity and data protection violations? Ted Dziekanowski #cybersecuirty #securitiesandexchangecommission #securities…
The regulatory agenda for cybersecurity risk management is developing as are the roles of the cyber, legal and risk professional in regulatory compliance. Providing oversight and assurance of cybersecurity risk management to the board room and in turn regulators. That…
A nice article on the importance of Enterprise Wide Risk Management and ESG from the American Bankers Association. It describes the importance of the risk function in ensuring and promoting safe and sound practices, supporting strategic goals for ESG. The…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
