Why does one feel that this is just the tip of the iceberg, with 90% of it sitting below the water line? In an indictment unsealed today (), seven Chinese nationals are alleged to have hacked U.S government officials, their…
One suspects cybersecurity risk management regulation focused on the Healthcare industry in the U.S will be moving thick and fast over the coming months. Following the UnitedHealth cyber attack. As lawmakers struggle with how best to address the challenges that…
U.S Federal Agency Health and Human Services, Office of Civil Right (OCR), is investigating UnitedHealth Group and Change Healthcare following their February 2024 cyber incident. An incident that had a significant effect on the healthcare industry across the U.S. ()…
Between 12:15ET and 12:45ET on March 28th Ryan Buckner and I will be hosting a lunch and learn, discussing the recently signed MoU between Veritas GRC and Schellman. To create and deliver board cybersecurity risk management education programs to the…
A speech by the chair of the Securities and Exchange Commission Gary Gensler, favoring and justifying mandatory disclosure. ‘The basic bargain that President Franklin Roosevelt and Congress laid out 90 years ago was that investors get to decide which risks…
Cybersecurity risk management regulation is a challenge public and private sector firms will have to face. Regulators in the United States and European Union are moving ahead with enforcement regimes, requiring boards of organisations operating in or with the U.S…
One must not underestimate the authority of the Office of Personnel Management (OPM) in shaping the future of cybersecurity risk management in the U.S. The OPM sets the HR strategy for Federal government and in this case is pitching a…
@Thaddeus Dziekanowski, the insurance industry is concerned about the systemic risk that AI poses. AI presents many challenges to the insurance industry, it is a tool that accelerates the development of current risks, creates new risks and can be a…
The issue is not one of ‘Has the EU left the UK behind on AI regulation’, the issue at hand is ‘Has the EU left the UK behind on Cybersecurity Risk Management regulation’, why? You cannot and should not regulate…
An important read, in what is a positive step. The U.S and EU governments announce they are working together to harmonise cyber incident reporting. The Department of Homeland Security (DHS) and European Commissions Directorate General for Communications, Networks, Content, and…
