Beware the activist investor if you’re a cybersecurity vendor (and if you’re an entity covered under cyber regulations). One has been interested in the state of the cybersecurity product market for many years. More so when people such as Chris…
Thank you for publishing @Thaddeus Dziekanowski. Public auto dealers across the U.S file disclosures to the U.S. Securities and Exchange Commission of potential material financial impacts to their businesses following the hack on a third party software supplier CDK Global.…
It’s a pleasure to be presenting today for the Institute and Faculty of Actuaries on the subject of US and EU cybersecurity risk management regulation, its effect on risk transfer and opportunities to improve actuarial decision making. I will be…
An intriguing article on the diversity of background of cyber leaders, and the challenges that they face in closing the cyber knowledge and skills gap. Developments in cyber regulation expose boards, leadership teams and security professionals to civil and criminal…
One has to say that Erik Gerding, Securities and Exchange Commission Director of the Division of Corporation Finance, is on a role on disclosure. This is not the first statement made recently on the disclosure requirements of covered entities. Here…
To pay, or not to pay, that is the question. Much like UnitedHealth when your back is against the wall, the boards choices are significantly reduced. One suspects the attack on CDK is much broader and deeper than is being…
Corporate Governance is a key to the management of cybersecurity, without it boards are unable to oversight, assure and attest compliance to the management of cybersecurity risks. A risk that is increasingly being regulated; a risk that is proven to…
The SEC has made several comments recently on the reporting of cyber risks and cyber incidents under its Cyber ruling effective September 2023. Erik Gerding, the Director, Division of Corporation Finance has been especially vocal on cybersecurity risk management reporting…
Like all jurisdictions cyberattacks that originate from out side a country, can affect those within a country, 1,000s of miles away. It’s what cyber is and what cyber attacker do, it’s not novel and its not unknown. The question however…
What’s 30 million records between friends? () One assumes that the UK Government was not going to pay the reported £40million ransomware. So the personal data has been shared. The health industry is ripe for cyber attacks, as demonstrated by…
