Last night the UK Attorney General Set out the UKs position on cybersecurity, international law and the need for a clear framework for cybersecurity, that make clear when state action is unlawful. Treating a cyber-attack the same as a physical…
Should Chief Compliance Offices (CCO) be held accountable for failures in corporate governance, that participate in Securities Law violations? Could the same apply to CISOs for failure to comply with cybersecurity and data protection violations? Ted Dziekanowski #cybersecuirty #securitiesandexchangecommission #securities…
The regulatory agenda for cybersecurity risk management is developing as are the roles of the cyber, legal and risk professional in regulatory compliance. Providing oversight and assurance of cybersecurity risk management to the board room and in turn regulators. That…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
A great overview of DORA, if it becomes law. Time will codify ICT risks under DORA for EU Financial services firms as DORA takes precedence. DORA is significant legislation for EU Finance firms, placing requirements on organisations to manage their…
Regulatory compliance in the U.S. especially in the areas of Sanctions, Cyber and Crypto is creating a compliance headache both for Federal agencies and their intended recipients. While Sanctions are not new, the convergence of AML, ESG, Cybersecurity and Crypto…
The increase in regulatory scrutiny of cybersecurity will require a closer working relationship between cybersecurity, regulatory compliance, risk management and legal. As global regulators such as the SEC and those in the European Union focus in on cybersecurity risk management,…
Last week marked a milestone in EU cybersecurity. With EU NIS 2.0 (EU Network and Information Security) and DORA (Digital Operations Resilience Act) moving forward to ratification by EU Parliament and Council members. The impact of either should not be…
Thank you for sharing Ted Dziekanowski. The U.S. Government through CISA and NIST has developed several CSF profiles for Critical National Infrastructure (CNI)(). Including Health, the Defence Industry Base, Manufacturing and Transportation, and the American Bankers Association (ABA) has a…
Ted Dziekanowski, an interesting read as EU NIS 2 moves forward. With the Securities and Exchange Commissions (SEC) proposals for cybersecurity risk management for firms with access to U.S. Capital markets and the US DoD DAFRS/ CMMC program that impacts…
