The effect of supply chain hacks? Reuters reports that Okta informed customer yesterday that the hack that targeted firm between September 28, 2023 to October 17, 2023 stole information on all users of its customer support system, not the 1%…
It’s a good question and depends on the lens used. The SEC defined in broad terms the standard of care it expects in their final cyber rule. Requiring regulated entities address the questions of materiality, reasonableness and adequate set out…
Lloyds of London recently published a report on systemic cyber risk, estimating that a catastrophic cyber attack could cost as much as $16Tr, best case $2.2Tr and likely $3.5Tr on a 5 year period. The basics for the cyber insurance…
DORA is a subject dear to our hearts, alongside EU NIS 2. One wonders the effect of cyber regulation on cyber security risk management across the ICT industry, not just Financial Services Ted Dziekanowski #cybersecurity #cyberriskmanagement #dora View Original Post…
So LockBit has taken a shine to the UK legal profession? With the Allen and Overy hack and reports on the 24th November that an MSP to the legal profession has suffered a cyber attack. An attack affecting a reported…
Cyber investment across EU CNI providers is not good. Least of all its a measure of Cyber spend as a percentage of IT spend. IT Spend is contracting as global economies tighten, hence cyber spend will tighten. Cyber attacks are…
A great a timely article in CITY AM by the chairman of Lloyds of London on the City’s role in risk taking, and the need for the city to take a bigger lead in the management of risk. I have…
It is a pleasure to be able to talk about the Securities and Exchange Commission (SEC) final cyber rule with Rachel V. Rose, JD, MBA on the 18th December, accredited by the U.S Federal Bar Association and myLawCLE. Many will…
One is interested to read about the opposition to cyber regulation, as it focuses on cyber incident reporting. One wonders if we’re missing the point. Cyber incident reporting is not the issue at hand, the bigger issue by far is…
Damned if you do damned if you don’t. One has to understand the dynamics of cybersecurity, banning ransomware payment is not an answer. Asking organizations not to pay ransoms in the hope that it will starve cyber criminals of their…
