Cloud has got a fair bit of attention recently and Microsoft has been keeping abreast of cyber regulation and updating its documentation as it relates to cloud. A significant challenge many organizations face when adopting cloud services is the implementation…
The process has started, examining the failure of SVB. A complaint filed Friday (Saturday AEST) in the federal court in San Francisco names Silicon Valley Bank chief executive officer Greg Becker and other bank directors and officers as defendants. Alongside…
Cybersecurity risk management is a national security issue for all nations. An issue that requires international collaboration to harmonise strategy, policy and standards across governments, government agencies, industry regulators and regulatory enforcement. U.S, EU and Australian regulators are now setting…
From 1st July 2023 many attorneys in the U.S will be required to undertake cybersecurity, privacy, and data protection training as part of their biennial learning requirements. () Ones really pleased that on the 11th April we start our accredited…
Cyber regulators require a risk based approach be adopted for cybersecurity. A risk based approach requires a knowledge of the organisation, its strategy, business operations and financial planning. Cyber risk management and cybersecurity are not the same. Many organisations will…
Reinforcing the earlier Lloyds post, the growing cyber threat from Nation State attackers is a concern. If it can be proven to be a nation state threat actors, cyber insurance maynot cover the costs, and it won’t cover the full…
Last week Ted Dziekanowski and I published a paper on Cybersecurity Risk Management, the Risk Management Framework (RMF) and the important role the Cybersecurity Framework (CSF) profile plays in risk mitigation. (). That we align within a TOM for cyber…
Thank you Bryan Foss. The importance of risk based testing in the SDLC should not be underestimated. The U.S is moving to regulate the SDLC, requiring organization that provide products to Federal Agencies declare their software BoM. The EU and…
Ted Dziekanowski thank you for posting our article. Cyber regulation shifts cybersecurity risk management compliance ‘Left of Bang’ on to the financial statements, and into the board rooms of covered entities. EU NIS 2.0, DORA, the SEC proposal sets board…
U.S and EU Cybersecurity regulations set out requirements for covered organization’s to demonstrate their governance over and management of cybersecurity risks. Cybersecurity risks that change with changes in organizational strategy, operations and financial performance. Governance over cybersecurity risk is managed…
