Is Zurich now moving into the CERT market? It does make sense, its a bit like your insurance company mandating who fixes your car after a bump. Keeps the costs down and goes part way to ensuring that the issues…
The information security professionals (CESG) of the security services agrees that information security should be risk based and that a companies controls environment should be proportional to its risks. View Original Post
Putting the board on notice that they are responsible for cyber. If enacted will it place the right level of focus on the subject? View Original Post
View Original Post
I have to agree, I’m not convinced that you can transfer cyber risk through cyber insurance. The very systemic nature of the risk, its breadth and depth of impact and complexity of risk mitigation, in my view, gives plenty of…
The CISO’s role is a difficult one, you cannot be everything to everyone. The C suite has a role to play and they need to be communicated to, take responsibility and accountability for security related risks. The CISO should support…
Never forget that your threat vectors could be as broad as the amount of data you share with others. Your IP could be at risk if your supply chain isn’t securing it as well as you think. View Original Post…
Will a balanced score card or flight deck be big enough to be able to visualize the breadth of Cyber risks. A good quality ISMS can include internal security risks relating to IT, Legal, HR, facilities risks external threat analytics…
Cloud apps? what about web services in general. In my experience companies do not always understand what data their we services are collecting. Its a good place to start, working from the perimeter in, to clean up the environment. View…
I would add that security professionals are key to the delivery on the GDPR. A good security framework is information based. View Original Post
