The enclosed is the update of the UKs integrated defense review for 2023. At a time when Western governments are developing cybersecurity risk management strategy, regulation and programs that integrate national Security between kinetic, logical, offensive and defensive security and…
I’m looking forward to presenting at DSEI Japan this week. Where I will be discussing cybersecurity risk management regulation and regulatory enforcement. Regulation that includes DFARS/ CMMC, the SEC cyber proposal, EU NIS 2 and their impact on the global…
Cyber insurance or self insurance has been the only realistic option available for SMEs to manage cyber risk. As the cost of cybersecurity compliance has invariably been out of reach for most small to medium sized organizations. With cyber insurance…
Cybersecurity risk management is not cybersecurity. Cybersecurity risk management requires organizations to adopt a cybersecurity risk management framework, cybersecurity practices and governance. To identify, evaluate and mitigate its cyber risks by adopting and managing appropriate controls. Enabling boards to present…
The U.S has announced significant amounts of investment for Electric Vehicle infrastructure, with $5b Billion marked to build national EV charging infrastructure. To deliver charging stations to cover across 75,000 miles of U.S roads. Along side this White house has…
Cloud security is not just a problem for the U.S president it is a problem for all nations and their public and private sector Ted Dziekanowski. Cloud is a very good idea when implemented properly. The push to the cloud…
One wonders how this squares with the EU, U.S and Australia introducing broad reaching cybersecurity regulation under EU NIS 2.0, DORA, The ONCD National Cybersecurity Strategy, Australian cybersecurity laws and DoD DFARS program? GDPR affects only one data class, PII.…
One suspects that companies are starting to make the hard decision between the economics of paying a ransomware, the unlikely event of getting the encryption codes and the cost of restoration of operations. The regulatory implications of cyber are now…
Harmonisation and close cooperation are going to be critical to deliver the AUKUS program. As pointed out in this article, ITAR and cyber are considerations that need to be resolved if information sharing is going to be achieved. Ted Dziekanowski…
For boards of SEC covered entities this is a demonstration of the oversight and assurance the regulator places over market reporting, in this case cyber incident disclosure. It also demonstrates the challenges boards can face with clarifying and accurately reporting…
