A great article that is well worth reading, bringing together cybersecurity, regulation and litigation. The regulatory landscape for cybersecurity is developing at a rapid rate. The SEC recently released a cybersecurity proposal, the DoD CMMC program requires DFARS compliance, there…
We presented a proposal to the DoD, Cyberspace Solarium Commission, NDIA and AICPA in 2021 to manage DFARS and CMMC compliance. We called it the Augusta Plan 1.0, or Augusta Plan 2.0 to enable CMMC, FISMA and OMB A130 compliance.…
I wonder where the FCA will go with cybersecurity risk management compliance Bryan Foss if the SEC proposal on cybersecurity risk management, strategy, governance and incident disclosure is formalised. It requires boards to disclose corporate cybersecurity risks, their cybersecurity experience,…
I am looking forward to today’s conversation on the SECs cybersecurity proposal with the The Institute of Internal Auditors Inc. Ted Dziekanowski, the more you immerse yourself into the SECs proposal, the more you understand that the SECs requirements are…
The 5 Eyes community has released a cybersecurity advisory warning of the threat of Russian state sponsored cyber attacks. U.S., Australian, Canadian, New Zealand, and UK cybersecurity authorities urge critical infrastructure network defenders to prepare for and mitigate potential cyber…
Are we at a pivot point with cyberspace and the application of international law? Traditional rules of engagement and domains of operation do not apply in cyberspace and cyber related attacks are difficult to trace and legally enforce. This is…
A Norton Rose survey identifies cybersecurity as an area of concern for litigation by corporate General Councel. With Financial institutions increasingly feel more vulnerable to cybersecurity-related disputes as compared to other industries, with 79% of financial institution respondents reporting feeling…
Well worth a read. Last week the chair of the SEC discussed the importance of cybersecurity with the Financial and Banking Information Infrastructure Committee (FBIIC) and Financial Services Sector Coordinating Council (FSSCC). The importance of the public and private sector…
Thanks Ted Dziekanowski , looks like the FDA are moving up and down the product management life cycle. Embedding cybersecurity practices from design through pre-prod and aftershaves. Aligning with a QMS. View Original Post
We have created a cybersecurity risk TOM, governance and risk framework for SEC compliance. There is no simple scorecard when one looks at a CSF profile that includes business and mission objectives and governance. How many controls do you have…
