One waits to understand the full impact of the Crowdstrike incident and suspect it’s going to be way north of the $5.4 billion quoted. For the simple reasons that the incident had a bigger blast radius than Not Petya; impacted…
The UK is stuck behind the curve on cyber, as reported in December 2023 to Parliament. Our international partners have made cybersecurity risk management a priority, regulating cyber for capital markets, Critical National Infrastructure and Financial Institutions. Regulation that sets…
A great article that consolidates some of the tech industry layoffs in 2024. When one looks at the list, one is struck with the valuations, capital raised and reductions in headcount. It is unlikely there are simple explanations to the…
1. Has the Crowdstrike incident started the process of boards rethinking their ICT and Operational Resilience? 2. What role does the investment community play in influencing product resilience? As the CEO in an interview with CNBC ‘placed some blame on…
One wonders the effect the Crowdstrike event will have in insurers? As cyber and ICT risk grows will the insurance industry step back and reflect seriously on how it needs to change to address risks, over which it or its…
We have to get the 3rd line right if we stand any hope of delivering cybersecurity risk management and regulatory compliance. Board governance relies on effect audit to assure 1st and 2nd line risk management and oversight. EU DORA aligns with…
A great article further highlighting the challenges in the post by Brian Krebs. Companies such as Wiz, for example, are not just start-ups. They are companies upon which organizations rely to mange their security. If these companies fail, as we…
It’s going to take time for the Crowdstrike incident to unravel. It was clearly an ICT risk, adding to the complexities insurers and their clients face. We do not live in a world that underwriters understand and can manage. We…
Cyber insurance offers opportunities and threats. Opportunities can be made by going ‘Left of Bang’ and delivering proactive cybersecurity risk management ahead of incident response. Demonstrating Proactive risk management is required by insurers under EU and US regulation and by…
What is interesting about last weeks incident is there appears to be no real solutions put forward to prevent further crisis. Solution that can be delivered where rubber meets the road. The digital gene is well and truly out the…
