The first hurdle to overcome is recognising that cybersecurity is not the same as cybersecurity risk management. The second is to keep an eye on the SolarWinds case and the implications of cybersecurity on the board, the CISO and reporting…
An important report on the state of UK cybersecurity and actions that UK firms need to take to implement cybersecurity. The UK and EU is heading towards a cyber standards and regulatory problem, that is being driven by the US…
Reminiscent of the Norsk Hydro hack, going back to paper. However the current Ukraine Russian crisis is not leading to ransomware, its resulting in complete asset destruction. That appears to be what has happened in this incident, how broad and…
If you are a security professional then I strongly recommend you register and review the Law360 article on SolarWinds. A US judge has kept open an investor suit against the company, following allegations from SolarWinds investors that the software firm…
Cyber insurers could potentially be looking at large claims due to the Ukraine-Russia war. While ‘some’ cyber insurance precedents have been set recently following the Merck Not Petya hack, it may not be enough to prevent claims disputes between the…
If $600Million was stolen from a Financial Institution the repercussion would be felt far and wide. The breach occurred on the 23rd March and discovered on the 29th March. I hope that they are able to recover the assets. The…
A great read from Brian Krebs, that demonstrates the ingenuity of hackers and the complexity of cyber problem for the public and private sector. It underlines how complex cybersecurity risk management is, not just as a technology problem, but a…
I think cybersecurity risk management and ESG will converge under ESG. Cyber is a very significant risk for shareholders and US cybersecurity regulatory regimes are developing quickly. With a number of Federal legislation, regulation and enforcement programs underway and ESG…
The right models will be key to cybersecurity risk management, if the SEC moves ahead with its proposals for cybersecurity, the US DoD CMMC program is deployed, defence contractors continue with their DFARS compliance and the DoJ continues with their…
UK cyber agency asks companies to consider the use of Kaspersky AV. Given the heightened threat posed due to the Ukraine war and possible cyber attacks. View Original Post
