Reassuring. The government agencies need to work with the hacked entity, as they have to manage the message to the market. So its reassuring that the dialogue will take place. So that companies don’t shy away from getting the right…
For any organisation to have remote chance of managing cyber risk effectively, there has to be a focus on what it does and how it does it. It’s about people, process and systems. Processes drive corporate value and processes contain…
With the oil and gas industry being critical national infrastructure (CNI). It’s important that SCADA and lower level control systems are hardened to withstand cyber attacks, as the consequences of a successful cyber attack are just unthinkable. The oil and…
An interesting article which raises several questions relating to cyber insurance. It contains some great content links which look at the question of, is cyber risk an insurable risk. It raises some interesting questions, with the regulatory landscape enforcing cyber…
We don’t ever seem to learn. Password management is a basic security building block, for securing our digital identity. But we still don’t seem to be getting it right. A phrase is an easy alternative, albeit not ideal View Original…
Are the geopolitical issues with Huawei getting deeper. if the company was funded in part by the PLA, have Western governments been correct. Taking the stance they have, to protect national interests? View Original Post
With the outsourcer Wipro announcing that it had been hacked and the potential for its system to be used as the launch pad for hacks against its clients. What are the implications for outsourcers and their clients alike. I just…
Remember, our global.supply chain relies on the maritime sector. There needs to be a concerted effort from the sector to focus on Cyber, Notpetya should have been a wakeup call to everyone. The threat vectors don’t change from land based…
If you want to make the biggest impact in cyber security, follow the 80:20 rule. Start with basic security hygiene, controls and assessment. Security tools and software underpin good well managed processes. There are no magic bullets. View Original Post…
The biggest challenge we face in cyber risk oversight, in financial services, is creating realistic risk appetite statements. Required by regulators to show that boards understand and can manage the risk. The complexity of cyber security and its enterprise wide…
