And we’ve not yet started the holiday season Ted Dziekanowski. It takes time to close the cyber gap. Time that we may not have. Brian D. McCarthy #cybersecurity #cyberriskmanagement #cisa View Original Post
The U.S Department of Health and Human Services (HSS) is planning to implement cybersecurity regulations for cyber breaches and data security of hospitals and health systems. HSS is the cabinet level Government Agency that provides health and human services and…
An important read from the FBI and DoJ for SEC final cyber rule covered entities. Guidance for reporting Material cyber risks that could compromise national security or public safety. Important to note that a covered entity must first establish materiality.…
An important read from the FBI and DoJ, on covered entity incident reporting under the SEC final cyber rule. Guidance for reporting Material cyber risks that could compromise national security or public safety. Important to note that a covered entity…
Apologies – reposted The UK is proposing its own regulation that has similarities to DORA. With proposals requiring FIs to oversight ICT third party vendors, such as cloud providers. Third part supplier resilience and concentration risk is a critical vulnerability…
The definition of a cyber attack depends upon who you speak to, I’m therefore not convinced that 20% of UK businesses have been hit by a cyber attack in 2023. But all the same cyber is a significant risk, and…
A great report from the Harvard Law School, after the release by the SEC of charges against SolarWinds following its 2020 data breach. Highlighting the lessons company should learn that include the SECs prioritization of Cybersecurity enforcement; Accurate Disclosure; Individual…
Olaf Classen, this is both outstanding in the level of effort that has gone into the development of the architecture, worrying in its complexity and highlights the challenges faced for the oversight and assurance of cybersecurity for the German Government.…
If it is correct and GE were hacked, and data was stolen belonging to GE and DARPA. Was the data breach also a breach of contract under DFARS 252.204-7012, requiring the implementation of NIST cyber standards? Ted Dziekanowski Brian D.…
One is sometimes consumed by the release of the SECs final cybersecurity risk management rule as it effects covered entities on U.S capital markets. There are also 2 further and equally important SEC cyber regulations in the Final rule stage.…
