Ted Dziekanowski we have written many times of the role FISMA plays in U.S cybersecurity. Alongside OMB A-130 it forms the foundation of U.S cyber regulation. () FIMSA defines the framework for U.S Federal cyber compliance, that has in largely…
The cyber insurance market is without any doubt growing, growing fast and will continue to write premiums as cyber risk grows. Creating challenges for the cyber insurance and reinsurance markets, in raising capital to cover claims. But is the ILS…
Thank you Brian Levine for posting. CISOs not only require legal protection. With several articles published recently looking at the skills CISOs need to operate in the board room. There needs to be a reality check by boards and CISOs…
Thank you Ted Dziekanowski. One is not convinced that cloud poses a special cyber risk for CNI. As you have said many times and demonstrated through your work as one of few Cloud Audit trainers globally. Cloud alongside all infrastructure…
Thank you Gerry Kennedy, cyber regulation will drive cybersecurity risk management left of bang over the coming 6 – 12 months. It is important that those involved in cyber regulatory compliance across all covered organizations, understand the legal and risk…
The ransomware threat vector was only ever going to increase in popularity, as it moved from a specialist threat to a commoditized service. When a child can run a ransomware attack through RaaS; companies ignore cyber risk; and there are…
Scenario planning is key for nation states and corporates alikely. Whether it is running exercises testing failures of transportation, banking, water or power generation infrastructure. Organisations will also be required to evaluate their own cyber risks through U.S, EU and…
The Securities and Exchange Commission has limited resources available to consider rule making. With proposals such as the cybersecurity risk management proposal, it is critical to ensure that appropriate decisions are reached and all comments considered. As SEC decisions move…
A great summary following an update given by the SEC Director of Enforcement Gurbir Grewal, at a recent Financial Times summit held on cyber resilience. Discussing the comments made by Mr Grewal and a sidebar on those comments, that adds…
While one always questions statistics when evaluating cybersecurity and the market, even if a third of cybersecurity breaches are going undetected, (one suspects its much higher as 99% of organisation are SMEs, that invariable cannot afford to do cyber), then…
