Ted Dziekanowski, an interesting read as EU NIS 2 moves forward. With the Securities and Exchange Commissions (SEC) proposals for cybersecurity risk management for firms with access to U.S. Capital markets and the US DoD DAFRS/ CMMC program that impacts…
Know your enemy and know yourself to build an effective defence. Cyber threat modelling along-side vulnerability assessment and a clear managed enterprise wide architecture are important components to cybersecurity risk management. However this is the challenge. The Securities and Exchange…
A thank you to Brad Monterio, Peter Lucas, MBA and Tahmina Day, M.B.A. for arranging and participating in yesterdays U.S. The Institute of Internal Auditors Inc. webinar on Geopolitical disruption. It was a pleasure speaking at such a well attended…
This article from legal counsel is well worth a read on cloud security, security regulatory frameworks and data security that I know my colleague Ted Dziekanowski will comment on. It summarises the ‘shared responsibility model’ that cyber professionals and legal…
An important read from Australia, as the Federal Court handed down its judgment in proceedings brought by the Australian Securities and Investments Commission (ASIC) against RI Advice Group Pty Ltd (RI Advice). Finding that there was a proper basis for…
Well worth reading, a report by the US firm Cyberreason who have been tracking a Chinese threat actor called Winnti, also known as APT 41. Whose primary focus is IP theft, in support of state sponsored hacking groups. Attributing Winnti…
The average cost of ransomware attacks on organisations has increased significantly over the past 2 years. Tracking alongside the increase in frequency of attacks and as the article points in part due to the growth in the success of the…
U.S army is moving forward with the Risk management Framework 2.0, under FISMA. This is important for those companies that wish to deal with the DoD, as risk management become an integral part of defence procurement and supply and mission.…
Thank you Ted Dziekanowski, the DoJ settlement is an example of the challenges ahead for cybersecurity. The DoJ civil cyber fraud initiative and the enclosed settlement is an example of the regulatory enforcement that is being tested in the US.…
I wonder where the FCA will go with cybersecurity risk management compliance Bryan Foss if the SEC proposal on cybersecurity risk management, strategy, governance and incident disclosure is formalised. It requires boards to disclose corporate cybersecurity risks, their cybersecurity experience,…
