Thank you Brad Fraser for sharing the paper. The concept developed and trained by the U.S Marine Corp during the Iraq war, focusing on incident prevention rather than incident remediation. To provide Marines with the tools to enable them to…
Audit reports are not always the most riveting of reads, but I have to say this report is. Not because it’s about U.S Nuclear Cyber compliance but because it starts with OMB A130 and FISMA as the foundation for U.S…
We cannot underestimate the importance of the appointment of the secretary-general of the International Telecommunication Union (ITU)s in determining the future of the internet, a vote that will take place next week. The ITU develops worldwide technical standards for the…
Thank you Ted Dziekanowski, the challenges with oversight and assurance of the DIB alone has identified allot of compliance challenges. But it has to be said that there are plenty of alternatives that the GSA could adopt such as implementing…
The challenge for companies is that cybersecurity products do not a secure business make. The cyber regulatory landscape is getting tougher, cyber insurance is struggling to fill the inherent – residual cyber risk gap, and expectations are that organisations will…
A very informative and balanced read. The full report focuses on the evolving cyber regulatory environment, recent cyber case law and the role U.S federal agencies such as the FTC, SEC and DoJ are adopting for cybersecurity and digital. It…
Thank you IFACI for the opportunity to discuss cybersecurity risk management, the impact of international cyber regulations, and the role of Internal Audit as the 3rd Line of Defence. Many disagree with the ‘stick’ approach of regulation to address corporate…
Ted Dziekanowski Cyber is rumbling along waiting for the right moment and no one is quite sure publicly to attest to the capabilities of any side in the Ukraine Russian Conflict. Plausible deniability can be made for the gas pipeline…
Cyberattacks may not be the new norm for everyone, but the once low probability attacks that used to affect websites through DDoS or poor configuration and patch have been replaced by extreme loss, higher probability, high severity threats. We have…
I am looking forward to supporting the U.S Institute of Internal Audit with Shawna Flanders CRISC, CISA, CISM, SSGB, SSBB in October, as they kick off their program for Cybersecurity Month. On the 4th of October we are having a…
