Insuring cyber is becoming a issue of differentiation for insurers, but that was only every going to be thus. With a focus on cyber incident response insurers have found it difficult to model cyber risk. There’s no correlation between cyber…
Thank you for posting Oliver F. Gosemann, for me this is an important report for a couple of reasons. The first is the German government used data from Bitkom to heavily substantiate its final NIS2 implementation draft in July 2024…
Citi has been under the regulatory spot light for a few years. Recently the OCC amended a Cease and Desist order relating the Citi’s enterprise-wide risk management, compliance risk management, data governance, and internal controls transformation programs. Issuing a $75…
A great post Brian D. McCarthy, as cyber regulation increases the burden being placed on the role of CISO is increasing. Yesterdays post on burnout being one such consequence. While one cannot doubt that the role of the CISO is…
A great article on the pressures placed on cybersecurity professionals and attrition, that continues to paint a worrying picture for the future of cybersecurity risk management. At a time when cyber attack frequency, complexity and severity are on the increase.…
Here in lies a problem for the insured, insurer and governments, being caught in the ransomware doom loop, or as one calls it damned if you do damned if you don’t loop. 99% of companies by number are SMEs, they…
The Australian Government has introduced a package of Cybersecurity legislation, to 1. Mandate minimum cyber security standards for smart devices; 2. Introduce mandatory ransomware reporting for certain businesses to report ransom payments; 3. Introduce a ‘limited use’ obligation for the…
It’s great to see the UK government starting to think about the UK cyber talent pipeline. Cyber talent is without doubt one of the biggest levers that holds the UK and other countries back when it comes to cyber protection.…
A great paper that pulls together the pieces of strategic cybersecurity risk management and regulation. As we know cyber regulation is one of the most complex and politically sensitive topics for many governments. One the White House ONCD took on…
Why cyber risk quantification has failed thus far, maybe why 15% of companies are modeling the financial have tried to model the risk. PWCs survey identified that he barriers to risk quantification included. – Data issues (cited by 44% of…
