Do companies understand what their digital services are doing when they are exposed to the internet. A good old fashioned pen test before they go live might help out. View Original Post
This EU legislation will help to harmonize information security co-operation and response across Europe. Which cannot be a bad thing. View Original Post
Will Cyber Insurance deliver what it says on the tin. Or is the pervasive impact of a cyber attack making cyber insurance a less attractive proposition for insurers? The nature of risk aggregation is a problem, not unique to cyber,…
Is Cyber stress testing on the way for Banks? The UK has its CBEST programme, can we see cyber risk management formally making its way into international banking legislation? View Original Post
Cyber risk management is everyone’s responsibility, not just first and second line. The very nature of our interconnected and often complex business models helps cyber attackers. Corporate’s offer them so many different opportunities to acquire data or to disrupt business…
Cyber has been commoditising for some time, but this goes to show that prices are falling. Which can bring threats to the mass market, which in turn can increase the number of threat vectors out there. Like any capitalist market…
Cyber risk management is everyone’s responsibility. Not just first and second line. The very nature of our interconnected and often complex business models helps cyber attackers. Corporate’s offer them so many different opportunities to acquire data or to disrupt business…
It’s finding an individual with a mix of business and technology knowledge, someone who understands a balance sheet and someone who know’s who to call when an incident occurs. Which makes the CISO a difficult hire. View Original Post
The Network, Information and Security Directive has been adopted by the EU council and comes into force in August 2016. This little known piece of legislation compliments the European Data Protection Regulation which comes into force in May 2018. The…
So your employees will think less of you as a company if you have a data breech. It’s a chicken and egg situation, poor cyber awareness could result in a breech and once you have a breech your staff will…
