One has to look at the text of EU NIS 2.0 proposal and DORA published this week and hope that the UK is able to develop regulation to address cybersecurity risk management. Regulation in line with recent U.S, EU and…
Now the EU council has adopted EU NIS 2.0, what will it mean for EU National CNI providers, their suppliers, and ICT providers. There are a significant observations to be considered. Adopting cybersecurity risk management and holding management teams of…
One could argue that cyber is at a cross road and cyber firms should be very excited about the proposed changes that cyber regulators are looking to adopt, as it will drive sales and growth. But the cyber tech industry…
The Australian Prudential Regulation Authority (APRA) is working with Medi bank to outline the scope for assessing the organisations risk management practices, to be conducted by the external auditor Deloitte. The APRA has regulator tools in the form of CPS…
An interesting response from the U.S Risk Management Professional Society RIMS to the Federal Insurance Office (FIO), supporting a Federal Backstop for cyber insurance. The letter RIMS raises an important consideration for a Federal Cyber Insurance policy, and that any…
With the fall out of the U.S mid term elections crystalizing, will cyber be one issue that both sides of the House of Representatives and the Senate agree on? While there will be plenty of time and opportunity for soul…
Thank you for post Gerry Kennedy. We’re not talking about anything new, as you rightly point out Y2K came and went, regulations come in and get enforced and boards have to face up to managing different risks today than yesterday.…
Cyber is no longer a Fear, Uncertainty Doubt (FUD) debate. Cyber is a geopolitical (Ukraine-Russian, Iran, China, North Korea), criminal (ransomware, DDoS, phishing), proxy (National Security, IP theft), script kiddy (Microsoft, Okta, NVIDIA) and supply chain (SolarWinds, Toyota) issue. An…
I thought that I should post the EU DORA text, as it is worth reading from page 38(article 1). The EU Digital Operational Resilience Act is one of a number of pieces of legislation the EU is working on to…
The European Union has adopted the text for its Digital Operational Resilience Act (DORA). DORA is one of a number of legislation that the EU is working on that focus on cybersecurity risk management. RLegislation that has consequences of national…
