The SEC has now finalized cybersecurity risk management for companies covered under the Securities and Exchange Act 1934, that includes foreign registered companies. It is a significant cyber regulation, with global, cross sector impact. A regulation that if past SEC…
The Chair of the SEC and Commissionares approved the SEC cyber final ruling 3:2 Ted Dziekanowski. Reporting cyber compliance in annual reports starting on or after 15th December 2023 and 18th December 2023 for incident disclosure. Now the work begins,…
Certification does not a cyber professional make. Nor are they a bad thing, especially given the challenges we face with managing cyber risk. But we have to recognise the gaps between certifications and the experience and skills need to comply…
An important read on cyber insurance, and update to German caselaw. The German regional Court of Tübingen rendered the first judicial decision concerning cyber insurance. Ruling in favour of the insured. The court rejected the insurer⬢s argument that the insured…
Thoughts? When regulators want you to demonstrate cyber risk management, that requires an understanding of threats and vulnerabilities. How do you collect the data necessary to demonstrate risk mitigation, when no one has yet been able to correlate cause, event…
One has discussed the cybersecurity of EV charging and charging infrastructure for some time. NIST has now published a draft CSF profile for EV Extreme fast Charging Infrastructure. Drafting a baseline standard for cybersecurity compliance for EV extreme fast charging…
Thank you Rachel V. Rose, JD, MBA. With the U.S and EU both moving forward with proposals requiring the manufacturers of ICT products and services to validate their cybersecurity, before they can be sold or distributed in their respective jurisdictions.…
With the role out of EV charging infrastructure, in response to meeting the demand for EV Vehicles. Are we in danger of building a value chain of insecure EV tech straight out of the box? Charging infrastructure from the power…
Australia Prudential Regulatory Authority (ARPA) has moved to strengthen board oversight and assurance of cybersecurity, by updating CPS 230 ‘Operational Risk Management’ standards. Proposing requirements for more robust oversight of cybersecurity risks by boards of covered banks, insurers and superannuation…
One wondered why the DHS recently outlined its role in the oversight of cybersecurity, as it related to OMB and FISMA? Then the FISMA 2023 proposal made it clear that several Homeland Security Committees will oversight the implementation of FISMA…
