Cybersecurity risk management is a global problem. @Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Veritas GRC #cybersecurity #cyberriskmanagement #cyberinsurance #defense View Original Post
On the 27th of March the Belgium Parliaments Commission on Interior Affairs approved a draft law for NIS 2 (EU 2022/ 2055). The bill aims to fully replace the EU NIS 1 Directive in Belgium and forms part of Belgium’s…
Is the DoD just skirting around the edges of cybersecurity risk management? The DoD has all the tools it needs to enforce cybersecurity risk management across the DIB, its just chosen not to enforce them. DFARS 252.204-7012 has been in…
No matter if it’s the SEC Final Cyber Rule, EU NIS 2 or DORA boards are required to demonstrate their oversight, assurance and to attest cybersecurity risks. Material or otherwise. That requires robust governance over cybersecurity risk management. No single…
Yesterday Veritas GRC and Schellman held a webinar discussing cybersecurity risk management and regulatory compliance. Talking about the importance of building a coordinated approach supporting boards comply with cybersecurity risk management regulations, and our commitment to work together to build…
Who will sell out who out first? The cost to the U.S economy from the UnitedHealth cyber attack is in the $10s Billions. Trying to locate the ALPHV Blackcat group is of course important. But one wonders if you can identify…
One suspects cybersecurity risk management regulation focused on the Healthcare industry in the U.S will be moving thick and fast over the coming months. Following the UnitedHealth cyber attack. As lawmakers struggle with how best to address the challenges that…
U.S Federal Agency Health and Human Services, Office of Civil Right (OCR), is investigating UnitedHealth Group and Change Healthcare following their February 2024 cyber incident. An incident that had a significant effect on the healthcare industry across the U.S. ()…
A speech by the chair of the Securities and Exchange Commission Gary Gensler, favoring and justifying mandatory disclosure. ‘The basic bargain that President Franklin Roosevelt and Congress laid out 90 years ago was that investors get to decide which risks…
One must not underestimate the authority of the Office of Personnel Management (OPM) in shaping the future of cybersecurity risk management in the U.S. The OPM sets the HR strategy for Federal government and in this case is pitching a…
