The GAO report published on the 19th January sets out the requirement for a U.S National Cybersecurity strategy that one suspect will be addressed shortly. Looking at the deliverables for cybersecurity supply chain risk management of the 23 Federal Agencies…
Companies in France are under a sustained attack from cyber, one suspect that the figure is much higher. With EU NIS 2 and DORA formally on the EU Journal and the DoD CMMC program moving forward. The oversight and assurance…
Cyber requires both a whole of society and a whole of nations approach. I fear however that the problem is to big an elephant to be eaten in one sitting. We are seeing the first steps in the process through…
This is a concern. With EU NIS 2.0 and DORA now on the EU Journal the clock starts ticking for cybersecurity compliance of EU CNI, ICT providers and FIs. Managed Service Providers (MSP) fall under the scope of EU NIS…
NIST is developing its CSF 2.0. The CSF is the recommeded cybersecurity framework for FISMA amongst other regulations. FISMA is important as it is the cybersecurity and supply chain risk management regulation that is required by all Federal Agencies. The…
The volume of cyber incidents faced by T-Mobile is not insignificant and belays the complexity of the problem they face. Writing a report recently on U.S and EU Cyber regulations I was struck by the depth and breadth of oversight,…
In 2016 I was fortunate to have been recruited by the Grupo Santander CRO Jose Maria Nus and Jose (Pepe) Corral the deputy CRO, to build and develop a dedicated global 2nd Line for cyber risk. At a time when…
EU NIS 2, DORA and the EU CRA come at a time when the ONCD are planning to release a National Cyber Strategy, and the SEC is looking to release cybersecurity risk management regulation. They have some commons themes in…
Tech bosses are under regulatory pressure and not just from the UK. Recent developments in cybersecurity enforcement regimes in the U.S, along side proposed cybersecurity risk regulations increase compliance risk on the boards to tech firms. The EU is also…
NYDFS updates follow a trend by regulators of moving toward stricter cybersecurity risk management and board oversight. A trend that EU regulators are following through DORA and the SEC through its 2022 cyber proposal. For public firms registered in New…
