Sorry to say that in the past 2 months, I’ve asked 100 UK defence contractors about their DFARS and CMMC compliance; most have never heard of it. The same story from the EU. It takes 6 – 12 months to…
Once we had silent cyber, now we have silent AI. Interestingly, AI is being categorized as a force multiplier for other enterprise-wide risks and associated losses across technology E&O, professional indemnity, and D&O policies. Yet cyber is also a risk…
AI cyber risk is the top risk raised by the CEO of the UK by the Prudential Regulatory Authorities CEO, Sam Woods. AI is a double-edged sword for Financial Institutions; on one side FIs’ use of AI creates significant…
It makes no sense not to provide UK banks with access to Mythos; London Markets are a significant cog in the global economic system. Last month, Bailey said, Anthropic ‌may â have found a way to crack the whole cyber risk…
Thank you for posting Rachel V. Rose, JD, MBA, a timely demonstration that US Federal Government, in this case, the Department of Health and Human Services, takes cybersecurity risk management seriously. With HHS reaching settlements across several HIPAA enforcement actions.…
So there’s consensus that AI will cause an Inevitable Breach in cybersecurity, which will affect financial institutions. Elevating cyber risk to a potential macro‑financial shock, according to an IMF alert. But what can be done about it? It’s now time…
David Koran, thank you for posting your observations of CMMC Frequently Asked Questions and F-Q5. Covered entities must understand the basics of CMMC compliance, while keeping abreast with the continuous updates, feedback, and changes in CMMC compliance provided by the…
When we discuss EU NIS 2, we often focus on its effects on the 150,000 or so CNI companies that it will likely affect. However, the EU is not just a cybersecurity risk management program for CNI. It sets out…
Knowledge Compilation is the New RAG’, as RAG is deemed to be obsolete by the firm that built the vector database category. Pinecone has moved the debate on from RAG, which burns tokens to figure out understand data at query…
Cyber risk has always been a business-wide threat. There’s a disconnect in the boardroom as it relates to cyber. On one hand, cyber is recognised as a top board risk requiring investment. On the other boards are confident their organisations…
