I am surprised. The role of leaders is to manage cyber risk, as they manage any risk to their business strategy, operations and balance sheet. I wonder what the future holds as cyber regulation and enforcement programs develop? Leaders confidence…
Ted Dziekanowski, this is an interesting read. The case bought by the Australian Securities and Investments Commission (ASIC) adds precedence in Australia for cyber security and risk management practices, of AFSL licence holders. The Key takeaways identified in the article…
Ransomware is a critical cyber threat vector, whose impact is increasing and only set to continue a trajectory of year-on-year increases. Setting the agenda for increased cybersecurity risk management legislation, regulatory enforcement and a continued focus on cybersecurity legislation, education…
Nostradamus calls it Ted Dziekanowski. CISA has aligned itself to CSF profiles for some time across many industry sectors. The SEC and EU is proposing cybersecurity risk management regulations that require a cybersecurity risk management framework; FISMA is aligned to…
The regulatory agenda for cybersecurity risk management is developing as are the roles of the cyber, legal and risk professional in regulatory compliance. Providing oversight and assurance of cybersecurity risk management to the board room and in turn regulators. That…
A nice article on the importance of Enterprise Wide Risk Management and ESG from the American Bankers Association. It describes the importance of the risk function in ensuring and promoting safe and sound practices, supporting strategic goals for ESG. The…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
A great overview of DORA, if it becomes law. Time will codify ICT risks under DORA for EU Financial services firms as DORA takes precedence. DORA is significant legislation for EU Finance firms, placing requirements on organisations to manage their…
The increase in regulatory scrutiny of cybersecurity will require a closer working relationship between cybersecurity, regulatory compliance, risk management and legal. As global regulators such as the SEC and those in the European Union focus in on cybersecurity risk management,…
Last week marked a milestone in EU cybersecurity. With EU NIS 2.0 (EU Network and Information Security) and DORA (Digital Operations Resilience Act) moving forward to ratification by EU Parliament and Council members. The impact of either should not be…
