One has to look at the text of EU NIS 2.0 proposal and DORA published this week and hope that the UK is able to develop regulation to address cybersecurity risk management. Regulation in line with recent U.S, EU and…
The CMMC has a few challenges in front of it that need resolving. The international DIB as yet is not considered in the figures, 80,000 is a gross understatement of the number of organisations that the DoD relies upon for…
A very interesting question following recent events with FTX and a question that one suspects is being asked by VC/ PE and Private clients, as we head towards what is predicted to be a significant slow down in 2023. Are…
Now the EU council has adopted EU NIS 2.0, what will it mean for EU National CNI providers, their suppliers, and ICT providers. There are a significant observations to be considered. Adopting cybersecurity risk management and holding management teams of…
A great read that raises some interesting questions about nation state cybersecurity capabilities. Certainly it raises the questions about how nation states aim to achieve a meaningful level of cybersecurity capability that is both offensive and defensive, and the different…
It was once said to me that the U.S Whistleblower program and cybersecurity would be heading towards one another. To put it in context, in 2021 the SEC whistleblower program alone awarded over $1.1 Bn to individuals that raised complaints…
A very powerful article by Jake Bebber and one that we should take note. Cyber strategy in the West is and has been years behind that of our adversaries. We have opened up our networks and enabled the theft of…
This is worth a read if you are focusing on the U.S DoD CMMC program. I do not remember writing the comment to the OUSD A&S, but it came to my email address, so maybe I did. Comment: Does the…
One could argue that cyber is at a cross road and cyber firms should be very excited about the proposed changes that cyber regulators are looking to adopt, as it will drive sales and growth. But the cyber tech industry…
The Australian Prudential Regulation Authority (APRA) is working with Medi bank to outline the scope for assessing the organisations risk management practices, to be conducted by the external auditor Deloitte. The APRA has regulator tools in the form of CPS…
