As the days of the Biden administration draw to a close, the President has signed an Executive Order on Strengthening and Promoting Innovation in the Nations Cybersecurity. It makes for interesting read, reaffirming the application of cybersecurity risk management practices,…
The World Economic Forum (WEF) published its global risk report on the 15.01.25. Cyber remains up there in the top 5 behind misinformation, extreme weather, state armed conflict and social polarisation. Although one argues that cyber plays a part in…
Cyber risk has been consistently identified as the most significant risk most industries face. The WEF 2025 global risk report maintains cyber risk within the top 5, 2 year, global risks (one loves figure D, Global risk landscape: An Interconnected…
The problem we face with cybersecurity risk management is frequency, complexity and severity of impact. An issue that has grown by orders of magnitude over the past 14 years and that shows no signs of slowing down. With solutions proposed…
It follows that the reporting of incidents by all UK businesses, both public and private sector is required. Least of all, it’s embedded in cyber regulations of our partner nations.Banning of payment of ransomware may not be such a good…
One believes that Mr Schneier makes an appropriate observation, as it relates to cybersecurity risk management compliance. An observation that is now being supported by US and EU regulators who have introduced civil and criminal penalties for compliance to cybersecurity…
A great evidence based report from Rail Pen and Royal London Asset Management, ‘A guidance for investors – Cybersecurity Risk and Resilience’. Rail Pen is one of the UKs largest pension funds, managing over of £30 billion belonging to UK…
Could Europe (that includes the UK) find itself isolated, sitting on its own between the U.S and Russia, with little in the way of security. With Russia focused on a hybrid war in the EU and a new U.S regime.European…
@Thaddeus Dziekanowski, Jen Easterly the head of the U.S Cybersecurity Infrastructure Security Agency (CISA) focuses on Corporate Governance and the role of the board in owning cybersecurity risk management.Cyber has always been a board problem, no board can ignore their…
A nice paper by Michael Kranawetter on the future of cybersecurity risk management. Boards play a strategic, pivotal, role in the management of cybersecurity risk. A risk that is an issue for national, economic and societal security and a risk…
