Is imitation the sincerest form of flattery? If so then U.S and EU cyber legislators are working their hardest to flatter each other by ensuring that cyber regulation is in lockstep on both sides of the Atlantic. Here’s why. The…
An interesting report from Sophos on the Impact of cyber defenses on cyber insurance and the relationship between cybersecurity, cyber insurance and ransomware. One wonders the impact on cyber insurance when U.S and EU cyber regulations come into effect. Cyber…
A left of field post but one of interest on a Sunday, as the SEC charges a U.S investor advisory firm for its breach of fiduciary duty to its investors. Albeit a small fine, but an increasingly important message, when…
With the SEC cybersecurity risk management program pending and U.S DoD DFARS/ CMMC, one has to wonder the role of Whistblower program in cybersecuirty risk management compliance? The U.S DOD DFARS program requires covered entities to implement NIST SP 800-171…
Cybersecurity is a challenge for Japanese organizations as cultural dynamics and a feeling of trust, rooted in ‘why would it happen to me’ prevail. Experiencing this first hand as the the head of cybersecurity and operational risk for a Japanese…
The Uber CSO case has come to a conclusion with the ex-CSO receiving 3 years probation and a $50,000 fine. It brings to an end what is a distressing time for Mr. Sullivan, a clear problem for Uber, and precedence…
Thank you Olaf Classen for posting. The attack on Evotec would just fall under the carpet as just another cyber attack. But this attack demonstrates alternative consequences for a company following a cyber attack. If as is reported, the company…
A great read from Wired. Demonstrating the complexity of cybersecurity and supply chain risk through the SolarWinds hack. How a minor incidental investigation led to the uncovering of a significant supply chain hack, hard coded into SolarWinds and distributed globally.…
Is there a disconnect between awareness and preparedness for the management of cybersecurity risks. A disconnect that may surface when cybersecurity risk management regulation starts to appear on statute and D&Os are confronted with the challenges of reporting their cybersecurity…
One wonders the effects on D&O insurance and pricing when U.S and EU cyber regulations take effect? Will the changes be great enough to affect change in D&O policy pricing and coverage? As cyber risks are one of the top…
