Between a rock and a hard place. A clear example of why banning the payment of ransomware, is an impossible mission to follow for governments and regulators, in the absence of any alternate solution. Albeit in the case of United…
Cybersecurity and Enterprise Wide Risk are at the top of the Audit Committee Agenda as cybersecurity risk management regulation transfers cyber risk into the boards rooms of covered entities. A risk that may receive more prominence if PCAOB proposals to…
The U.S accounting regulator, the PCAOB, wants audit firms to take on more responsibilities for the detection of fraud. That includes greater oversight of cybersecurity risks (). Changes that members of the audit profession see as an overhaul of the…
UK and Australian export laws do not meet the standards expected by the U.S under the AUKUS partnership. Whose success requires the integration of disparate industrial, regulatory, security and trade frameworks, as well as development, production and fielding of high-tech…
There’s a slow awakening that EU NIS 2 and DORA are on their way and they will affect the boards of covered entities, that includes the potential for civil and criminal penalties and temporary board suspensions. In Ireland alone over…
The U.S DoD has worked out that Defense in Depth is the right way to go to secure its networks, and that the CISA strategy of Continuous Diagnostic Mitigation () has to be implemented. @Thaddeus Dziekanowski, the DoD is also…
Olaf Classen, when you are so dependent on a product or service to run you business operations considering cybersecurity is important. Even more so when your products and services are raised as a threat to National Security. Globally the public…
What happens when you bugger around with OT and industrial processes; demonstrated back in 2022 when it was reported that Predatory Sparrow (you gotta love the name) hacked a steel mill in Iran. Causing it to malfunction and pour molten…
What could possibly go wrong? Open Source code, Operational Technology, industrial processes and cybersecurity. To quote an old engineering colleague from Rolls Royce plc ‘Don’t bugger around with OT, get it wrong and you kill people’. It’s easy to say…
The FBI has been raising the threat of Chinese backed hackers attacking U.S CNI for the passed year. One has to hope that CNI providers have taken the warning seriously. For security agencies such as the NSA to come out…
