Sometimes people are trying to do the best thing, creating a way in to support the organisation. Other times not; but the compromise allowed hackers in to traverse the network. The breach cost NASA 500MB of sensitive data. In addition…
Cyber as an offensive tool, the Israelis have been rumored to target adversaries and the US are reported to have targeted Iran to knock out its anti aircraft systems. With reports of the US and Russians targeting their power networks,…
Over at IFSEC today, supporting membership for the Worshipful Company of Security Professionals (WCoSP), Security Institute and CSyP. View Original Post
An interesting article on cyber insurance. With underwriters saying they need more data to accurately model and underwrite the risk. In my opinion cyber risk bares no relation to most traditional insurance risks. Cyber is systemic in nature, the speed,…
Florida City pays $600,000 to get it’s data back following a ransomware. An expense email click. But with Baltimore, Atlanta, Newark, N.J., and Sarasota to name but a few, they may have had no choice. I find it interesting, with…
We’re still some way off getting cyber (security) leaders at the board table. Security spend is rising, yet CISOs aren’t getting their feet under the board table. They are still not peers of CIO. In my view there’s something which…
A very interesting article, potentially a first, written on the impact of a significant cyber attack on a group of systemically Important banks in the US. It provides an insight into liquidity, with a belief that there is enough liquidity…
A Bank of England raised the concern about the systemic impact of a nation state attacks on UK banks. Not so much if a single bank goes down. But if a nation state actor compromises the records of more than…
I do agree with the points made, its my own experience that there are some fundamental issues with security today. Which need to be addressed if we are going to drive the fundamental change needed for organisations to manage cyber…
US regulators are looking to pool their cyber testing regimes to try and reduce the testing burden on banks. Everyone recognizes that Cyber is the biggest non-financial risk that the financial services sector faces. With the system being as strong…
