Thank you International Security Journal (ISJ), it’s a pleasure to be published in this months International Security Journal, representing The Augusta Group (page 30). Discussing cybersecurity regulation and how it transfers cyber risk ‘Left of Bang’ into board rooms. Setting…
Thank you for posting Olaf Classen, a useful list of cybersecurity standards. The challenge for regulated entities is that these frameworks will not enable you to comply with U.S or EU cyber risk management regulations. EU NIS 2, DORA and…
Self attestation has never worked for cybersecurity risk management. The U.S DoD regulated cyber through DFARS self attestation under DFARS 252.204-7012, it led to failures in national security through IP theft. Capital market regulators have been raising concerns over cyber…
One cannot over emphasis the importance of internal audit(IA) in cybersecurity oversight, assurance and attestation. That will be required by covered regulated entities and their boards. The role of IA across ESG is magnified when one considers the effects of…
The Dear CEO letter from Financial Conduct Authority in September 2023 to cyber insurers focusing on policy wordings, highlights the challenges insurers having in delivering cyber insurance policies and their own knowledge of cyber risk in the board room. How…
UKs new law on EV seems to miss out cybersecurity. When it’s EU and U.S partners expect cybersecurity risk management compliance. Ted Dziekanowski Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA #paravasecuritysolutions #cybersecurity #cyberriskmanagement #evsecurity View Original Post…
There are two market dynamics that relate to cybersecurity risk management and publicly traded organizations. The first is that the share price of public firms drops when they announce an initial cyber attack. The past 4 months (since the announcement…
Cybersecurity risk management has been a continual challenge for the Internal Audit Community. I have presented many times over the past 2 years on the challenges internal audit face with cybersecurity, cybersecurity risk management and cyber regulation for the The…
Such surveys are intersecting for what they say and what they do not say. Only 34% of S&P 500 companies have a cyber expert on the board, 46% allocate cyber oversight to internal audit and 33% of directors think that…
One wonders if Zurich has considered doing the same for cyber insurance and cyber risk management. The CEO rightly (in ones opinion) stated that cyber is currently an uninsurable(economically) risk in 2022. One has seen no solutions put forward by…
