Material, Reasonable, adequate are the core tenets of the SEC final cyber rule (). It’s a challenges that boards face and must reach a conclusion on, not just for incident reporting. But to demonstrate they are managing material cyber risks…
The UK National Cyber Security Center has released a ‘Code of practice for software vendors’, and the need to raise cyber resilience of software. The code emphasizes the need to implement Secure design and development, securing the build environment, secure…
Allan Alford, I like the taste of realism. The CISO is the the only role that wants to sit at the board table, but has no professional standing to site along side there peers. A role that lawyers and regulators…
An interesting read published by Deloitte Center for Board effectiveness and Center for Audit Quality in March 2024. Evaluating the priorities for audit committees and the challenges, opportunities and improvements in audit committee effectiveness. Cybersecurity regulation across the U.S and…
The UK and U.S have raised the concern of the external influence China and other nation states over their Critical National Infrastructure over the past 12 months. While the challenge ahead for all nations is the historical adoption of technology…
Cyber insurance is going to be a $29bn business by 2027 (Munich Re), isn’t it. But today it’s not looking like a maturing market, it looks to be a market that is trying to find its feet. DWP figures for…
What is happening to the cybersecurity sector? One is trying to understand why are we seeing such turbulence across the whole cybersecurity eco system. At a time when cybersecurity is the most significant risk sitting at the board table? There…
Assurance is a critical point of discussion, that goes way beyond digital infrastructure, SDLC and the resilience of hardware, software and firmware. Assurance is key to the oversight of the whole cybersecurity risk management value chain and cybersecurity risk management…
We started writing about the adoption of the RMF, DoDi 8510.01, reciprocity and how the DoD, and other agencies can address cybersecurity risk management through reciprocity back in 2021. We called our strategy the Augusta Plan and presented to several…
We are seeing cyber regulation find its place within the Financial Services industry across the U.S, EU and GCC. With regulators including the NYDFS, SEC, EU Parliament and Commission introducing or updating cyber regulation. In addition to the Bank of…
