When the Office of Budget and Management wrote OMB A130 in 1985 the intention was to assign responsibility to the OMB Director to develop and maintain a comprehensive set of information resource management policies for use across Federal government. Later complimented by…
Rachel V. Rose, JD, MBA, as cybersecurity regulations drive cyber risk management compliance ‘left of bang’ the healthcare sector. Especially the boards of healthcare providers who will have to take more responsibility for the management of cyber security risks. Indicative…
Slowly but surely we are moving away from the FUD debate, that has driven cyber conversations for the past 10 years. Cybersecurity is national security, corporate security and societal security and without a combined legislative and regulatory framework to address…
Thank you Jamie Foster, I am looking forward to discussing cybersecurity risk management with yourself, Aoife Ryan Kate Steele and Jenny Wade from Hill Dickinson LLP tomorrow. Cyber regulation is developing rapidly, regulation that is affecting UK companies. #cybersecurity #cyberriskmanagement #cyberregulation View…
Cybersecurity is national security, corporate security and societal security. Cybersecurity requires national collaboration between governments and corporates and the international harmonisation of cyber legislation, regulation, frameworks and standards. So that international trade, and the economic cybersecurity of products and services…
Regulators and in this case investors, seem to be taking active oversight of audit firms, highlighted by this judgement. KMPG were order to pay $231mn following a claim by investors of poor audit practice. At a time when we see…
A great HBR update on cyber risk management. Setting out the moved organisations need to make away from typical controls based oversight to a risk based approach. Cyber risk management requires a better understanding of threats, vulnerabilities, risks and risk…
The UK finance regulator the PRA fines the ex-CIO of the TSB following the banks 2018 IT failure. The UK regulators is holding senior managers personally accountable for their division making. In this case for failing to ensure 3rd party…
The automotive sector is an increasingly problematic sector for cybersecurity. Automotive provides a rich source of personal data, OT and CNI. As we transition to all electric and driverless transport we increase our dependence and the Automotive sector. In turn…
Several U.S States have made an understanding of cybersecurity part of Attorneys biennial learning requirement from July 1, 2023. Notably New York State – () It was a pleasure to present with Rachel V. Rose, JD, MBA module 1 of…
