I am looking forward to today’s conversation on the SECs cybersecurity proposal with the The Institute of Internal Auditors Inc. Ted Dziekanowski, the more you immerse yourself into the SECs proposal, the more you understand that the SECs requirements are…
Thank you Christopher Hetner for publishing. Cybersecurity risk management and cyber security are not the same. Boards will be required to implement, assure and report risk compliance. A requirement many security professionals will find difficult to manage and one that…
Gary Gensler the chair of the SEC discusses the recent proposal for climate reporting and a brief history on long tradition the SEC has in disclosure and its relevance to climate related disclosures. Over the generations, the SEC has stepped…
Munich Re is moving to exclude war from its cyber policies. With S&P Global last week saying that insurance losses from the Ukraine conflict could total $35 billion, with cyber one of the classes of insurance most exposed. Following reports…
I am please to have been asked by The Institute of Internal Auditors Inc. to participate in their webinar discussing the recent proposal by the Securities and Exchange Commission (SEC) to regulate cybersecurity risk management, strategy, governance and incident disclosure.…
The US Office of Comptroller of Currency warns of the impact of tail risks as the Russian invasion of Ukraine continues. Geopolitical risk, cyber risk, inflation risk, asset price risk, and recession risk are all significant risks in their own…
The SEC whistleblower regime has precedence. With the SECs recent cybersecurity risk management proposal, one expects that transparancy of regulatory reporting will be a paramount consideration. View Original Post
The first hurdle to overcome is recognising that cybersecurity is not the same as cybersecurity risk management. The second is to keep an eye on the SolarWinds case and the implications of cybersecurity on the board, the CISO and reporting…
A great read from Brian Krebs, that demonstrates the ingenuity of hackers and the complexity of cyber problem for the public and private sector. It underlines how complex cybersecurity risk management is, not just as a technology problem, but a…
Markets are starting to get to grips with cybersecurity as a risk and changing their expectations of companies that get hacked. There was a time when a hack would have little impact on share price and it would rebound over…
