Roku, Inc. the U.S. public company that runs TV streaming services reported on Friday that 560,000 accounts have been breached, the second breach this year. Are we seeing markets move and react to cyber incidents, as Roku’s share price fell…
A great read for a Sunday afternoon, The Ransomware and Financial Stability Act 2024, that was put before congress this month. This is an important Bill if passed. It will have a significant effect on ransomware payments of covered financial…
The convergence of cyber security risk management regulation continues, as covered entities are required to submit annual notices of compliance to amendments to NYDFS part 500 of 23 NYCRR 500. Covered entities are required to submit a notice of compliance…
Olaf Classen BaFin the German Federal Financial Supervisory Authority has started the DORA clock ticking. As it announces that more the 3,600 Financial Institutions must comply with the EU cybersecurity risk management regulation from January 2025. Raising the question of…
One does not no where to start with this post. Other than with ‘What a disappointing indictment of cybersecurity risk management for the UK economy’. One has been saying for many years that cybersecurity risk management is a critical requirement…
@Thaddeus Dziekanowski how close are we really to a major cyber incident? One believes much closer than many think, and most understand. Our dependence on digital and lack of cybersecurity risk management is putting us at greater risk of a…
The insurance industry needs to get better at risk modelling. Cyber regulation shifts risk ‘Left of Bang’, setting requirements for boards to oversight, assure and attest cyber risk. Cyber regulation sets standards for the insurance industry to evaluate and model…
A great example of why the management of the Software Development Life Cycle (SDLC) and third party supplier risk management are critical to the digital lives we lead. What a ideal tool to compromise, free, widely used to compress data…
A great report from Munich Re that should be read. One is always intrigued when one hears that the cyber insurance market is maturing? Especially when the statement is followed by ‘yet a significant proportion of cyber risks remain uninsured’.…
Brian D. McCarthy, @Thaddeus Dziekanowski and I set up Veritas GRC to provide boards, executive teams and their organisations with a single point of contact for cybersecurity Governance and Regulatory Compliance (GRC). Delivering advisory, education, organizational design and support solutions…
