For those following the regulatory developments for cybersecurity risk management, continue to read. Last week under the Securities and Exchange Act of 1934 the Options Clearing Corporation (OCC) filed with the Securities and Exchange Commission (SEC) a proposed rule change…
Swiss-re is taking a more cautious approach to underwriting cybersecurity insurance. Choosing to build a body of knowledge of cybersecurity risk, investing in research and development to better understand this line of business ahead of making a decision. Ted Dziekanowski…
The head of the FBIs Cyber Division confirms the DoJ, FBI and CISA are working closely together on cybersecurity oversight. With all sides working to address the issue of liability protections and sharing of breach information. Ted Dziekanowski #cybersecurity #cyberriskmanagement…
In a development for UK Financial Service third party suppliers, the UK government has published a policy statement for mitigating risks from critical third parties to the finance sector (FS), such as cloud service providers. HM Treasury has been working…
Are cyber vendors starting to feel the pinch as economic headwinds affect capital markets. At a time when regulators are looking to enforce cybersecurity? Several factors are coming together in the cyber market place. The tightening of capital market liquidity;…
Great picture: The challenge for the CEOs of public utilities, and those of public U.S. companies if the SEC gets its way, is that the solution to cybersecurity risk management is not about software products, cyber about risk management. I’d…
A history of the 2022 cybersecurity announcements by the Securities and Exchange Commission (SEC). A great read from the NLR that provides a concise picture of the relevant announcements made by the SEC this year. Focusing upon cybersecurity assurance, legislative…
An important read. Federal Cybersecurity oversight of the U.S. DoD DIB makes a broader comeback in the latest draft of the 2023 NDAA. As the House Armed Services Subcommittee on Cyber, Innovative Technologies, and Information Systems voted to approve its…
The EU and its public and private sector organisations face a more significant issue from cyber regulation. While the EU has recently released the EU NIS 2.0 directive and a draft proposal for Digital Operational Resilience Act (DORA), requiring tighter…
An appropriate refresher from the Securities and Exchange Commission (SEC) on the role of audit. Audit is critical to regulatory compliance, providing investor confidence and boards with the appropriate oversight and assurance of both financial and non financial risks. Long-recognized…
