Sellafield processes nuclear waste from other nations, it provides nuclear power to 1,000s of homes across the North East of England and is CNI. If it were ever to suffer a catastrophic failure then there would be serious repossessions for…
Thank you for posting Brian Levine. We head back to governance, board oversight and assurance. One does not believe as demonstrated by regulators, that there is anyone that gets to make a sole decision, or influences a collective decision for…
Well worth a read. The Federal Communication Commission (FCC) reached a settlement with T-Mobile, that was published this week, for T-Mobiles failures under the Communications Act 1934. T-Mobile has had its fair share of cyber related incidents involving data breaches…
As with the cyber attack on Synnovis earlier this year, the cyber attack on TFL is taking a little time to resolve. One would say that it was a ‘sophisticated’ and ‘aggressive’ attack by a highly motivate nation state threat…
U.S DoD cyber requirements have been a contracted feature of DoD contracts since DFARS 252.204-7012 came into force in December 2017, requiring covered contracts down the down Supply chain to implement NIST SP 800-171. However since its inception 7 years…
MoneyGrams cyberattack has a knock on effect in the UK. As the Post Office contract with MoneyGram came to an end on the 30.09.24 and it has not been renewed, citing the cyberattack as the reason. Time will tell if…
The role of the CISO will not get easier anytime soon, all head winds are pushing against the role. Cyber regulation is changing the role quickly; U.S and EU regulators are setting the guard rails for cyber introducing oversight, assurance…
The Ukraine war has taught us allot about about modern warfare and the UK seems to be underprepared for modern conflict. One wonders the effect of cyber as a domain of operation and whether we have the necessary skills and…
We live in a digitally enabled and connected world. @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity #cyberriskmanagement View Original Post
Regulation sets the guard rails that we work within, irrespective of national, industry or regulations set by professional associations. The same is true for cybersecurity with a range of regulators starting to define the basic requirements for cybersecurity risk management.…
