If you can get to this article, it is well worth reading. Not for its ESG discussion, but for the regulatory and compliance challenges between the U.S and EU. In this case if the U.S does not develop an equivalent…
A great article that demonstrates the complexity of cybersecurity today and ahead for governments, agencies and organizations. The unpredictability of cyber attacks that include ransomware; the challenges with our reliance on digital and failure to back digital up with cybersecurity;…
An interesting situation for the DoD following the recent publication of sensitive information, and a request from the defense secretary to evaluate DoD data security. With all the cybersecurity and information security regulations and programs Federal agencies and the DoD…
We are fast approaching Module 2 of our Cybersecurity risk management program for U.S Attorneys. As we present U.S and EU regulatory highlights and compliance considerations on the 11th May. The U.S president has signed several cyber and supply chain…
The whole question of what is information related to national security and interests should not open up a subjective debate. However as China prepares to restrict the transfer of any information related to national security, one must remember that many…
This is a very interesting report created by Willis Towers Watson and Clyde and Co. Discussing the results of a survey of the top concerns for Directors and Officers, as related to Directors and Officers (D&O) Insurance. It is not…
This is a very useful post by the CIS, demonstrating the complexity of cybersecurity compliance. Compliance that is compounded further by U.S and EU regulatory requirements to implement cybersecurity risk management. Requirements that necessitate organizations to implement a risk management…
It is positive to see NIST releasing their latest update draft to NIST CSF 2 – (). Bringing further clarity to organizational context, roles and responsibilities, risk management and supply chain security within corporate governance. Especially the importance of business…
Cybersecurity risk management regulation will drive the fiduciary responsibilities of boards and individual board members. As some regulation sets out requirements for board to seek external guidance for cybersecurity. Whether this is through NEDs hired onto the board or through…
A nice overview of the importance of cybersecurity risk management as a corporate differentiator. It’s not just a differentiator, one has no doubt that with the amount of cyber regulation proposed, in development or in force cybersecurity risk management is…
