A nice article that outlines the challenges ahead for cyber regulatory compliance. Be it the SEC final rule, EU NIS or DORA, they all have common themes of cybersecurity risk management, board oversight, assurance and attestation and regulatory reporting of…
Ted Dziekanowski as with ESG you have to wonder the effect on credit risk as cyber risk becomes a focus of regulators. If insurers reduce or remove D&O coverage, cyber insurers reduce coverage and cyber regulation shifts risk Left of…
Brian D. McCarthy ‘boards need to be educated on the scope of the new rules and ensure their policies, processes, and procedures are updated to reflect new reporting and disclosure requirements’. While there is much focus on the SEC final rule,…
NIST publishes its final guidance on EV charging cybersecurity with NIST IR 8473 Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure. A further CSF profile to add to those already developed by NIST. As we wrote earlier this…
Insurers are caught between the proverbial rock and a hard place. On one hand having to manage the risk of cyber attacks on their own infrastructure, on the other manage the risk of their clients. Picking up regulatory capital to…
It’s not cyber, but the SEC issued The Boeing Company with an order to pay a civil penalty of £200million under section 308 of the Sarbanes Oxley Act of 2002. By failing to exercise reasonable care in making statements to…
We have spoken about cyber for many years as though it is a distant far off threat and risk category that is unlikely to affect us. Our messaging has not always been as clear as needed, when it has been,…
Chris Hughes ðŸ’ðŸ”, a great interview with Chris Inglis, the first U.S National Cyber Director. On one hand you have an increased threat of cyber attacks, on the other the economic challenges of addressing cybersecurity risk management and on a…
Corporate America faces an increasing amount of cyber and privacy regulation. Driven by federal and state regulators, that have issued a range of regulations for the management of cyber risk and privacy by boards of covered firms. Regulations that include…
Ted Dziekanowski, there is little doubt that developments in U.S and EU cyber regulation increases civil and criminal liabilities for covered entities. With cyber caselaw being written under older regulations, recent regulatory changes will be further tested. As regulations provide…
