A great summary from the international Law firm Goodwin on the Securities and Exchange Commissions(SEC) cybersecurity risk management proposals for Investment Funds, Advisors and SEC Public registrants. We have been saying for some time that the rules are coming and…
For those following the regulatory developments for cybersecurity risk management, continue to read. Last week under the Securities and Exchange Act of 1934 the Options Clearing Corporation (OCC) filed with the Securities and Exchange Commission (SEC) a proposed rule change…
Great picture: The challenge for the CEOs of public utilities, and those of public U.S. companies if the SEC gets its way, is that the solution to cybersecurity risk management is not about software products, cyber about risk management. I’d…
The EU and its public and private sector organisations face a more significant issue from cyber regulation. While the EU has recently released the EU NIS 2.0 directive and a draft proposal for Digital Operational Resilience Act (DORA), requiring tighter…
An appropriate refresher from the Securities and Exchange Commission (SEC) on the role of audit. Audit is critical to regulatory compliance, providing investor confidence and boards with the appropriate oversight and assurance of both financial and non financial risks. Long-recognized…
The CMMC AB has rebranded itself at the ‘Cyber Accreditation Body’. A move that may get some cybersecurity accreditation bodies in the industry interested, especially if it plans to spin out its cybersecurity training. One wonders what will happen when…
Some organisations are gearing up for the SECs proposed cybersecurity risk management, governance, strategy and incident disclosure legislation. The Augusta group has a tried and tested program for boardroom cybersecurity risk management governance, strategy and implementation. Supporting boards comply with…
Maybe the theme for this years RSA conference is security Industry transformation? With a recognition that cybersecurity has to change in light of the failures of organisations to manage cyber risk. Demonstrated by recent high profile cyber attacks that include…
Space Force seems to be moving quickly with its cybersecurity program? Rolling out cybersecurity requirements to commercial providers. The Space Force Infrastructure Asset Pre-Assessment (IA-Pre) program will require satcom providers to get on-site, third-party assessors to validate their compliance with…
The insurance industry has a major part to play in setting the cyber agenda. Cyber insurers are in a very unique position, they have direct access to companies that manage cyber risk through the insurers products and services. Insurers set…
