A great article. Cybersecurity is a continuum, it is not a defined state of success or failure. While one has sometimes used the term ‘cyber war’, there should be a recognition that cybersecurity and risk management is a continual process.…
An important read for those organizations, their boards and security professionals working in or with SEC registrants. The SEC Director of enforcement Gurbir S. Grewal speaks at an FT Cyber Resilience Summit about the paradigm shift from cybersecurity to cyber…
The UK governments cybersecurity center NCSC has refreshed its cybersecurity risk management framework. Including a risk methodology aligned with ISO 27005. Facilitating a more structured approach to cybersecurity risk assessment, quantification and management. Released at a time when global regulators…
Thank you for posting Ted Dziekanowski. CISOs should not be roiled with the action taken by the SEC against SolarWinds. The SEC has the obligation and regulatory duty to oversight and assure corporate management of material risk, and it has managed…
One has to ask the question of Defensive cybersecurity maturity here in the UK. We see many nations moving ahead, addressing cybersecurity risk management through regulation. The UK government issued the enclosed report on the implementation of its Cyber Essential…
The Australian Prudential Regulator Authority (APRA) has informed Medibank that it will have to set aside an additional $250 million AUS in regulatory capital, to address issues following its 2022 cyber attack. As the regulator reviews the banks governance and…
Apologies a repost, now with attachment. U.S Federal agencies are aligning behind cyber governance and risk management. The DHS is aligned with FISMA, the SEC proposal, EU NIS 2 and DORA are setting cyber risk and governance requirements. Board accountability…
A very interesting read. As the Department of Homeland Security (DHS) Transportation Security Administration (TSA) ratified cybersecurity requirements on U.S Oil and Gas companies in early June 2023. The ratification allowed the TSA to extend the expiration date of ‘Security…
One would argue there are more than a few caveats ahead for the cyber insurance industry. While the demand for cyber insurance grow, the insurance and reinsurance industry continues to face problems in finding the capital to support claims and…
Thank you for posting Ted Dziekanowski, as one of the few cloud audit trainers globally you are well placed to comment. Cloud and infrastructure security are important. The CISO will be seen as the accountable executive. One hopes they will…
