It’s been a week of ups and downs. Confirming yet again that Cyber is a national security problem. Always said the regulation has been there for 7 years, just needs someone to check that it’s been complied with.As we wrote…
What next for oversight and assurance of cybersecurity risk management across U.S healthcare. As the U.S. Department of Health and Human Services (HHS) announces headcount reduction programs.’Under the major reorganization, HHS OCR, which oversees HIPAA enforcement, rulemaking, breach and complaint…
A balanced piece on the current state of the SECs enforcement of cybersecurity and what the future could look like, from the Harvard Law School Forum on Corporate Governance.What is interesting is that the article pays little attention to the…
A critical, important and passionate senate hearing, that should be to watched, given recent changes to US security resources. With the recent issues with sharing sensitive information on insecure mobile devices, it pulls together many of the changes made by…
The UK Information Commissionaire Office (ICO) fined Advance Computer Software Group £3m, following a data breach in August 2022 that exposed NHS medical records and information on people receiving care at home. The hack appears to have been relatively simple.…
A great article that lays out the challenges AI faces delivering benefits to corporate users. Research finds that 88% of observed Proof of Concepts (POC) dont make it to production. A conversation rate that raises a few observations about the…
To quote Irvin Berlin, ‘There maybe trouble ahead’, as Big Tech, the EU and the US square up on AI. With the biggest, most mature and likely capable AI models coming from the U.S. The AI regulatory approach being adopted…
One is always interested when one reads about the application of the False Claims Act as it relate to DFARS 252.204-7012 (DFARS 7012). As has been mentioned many times, DFARS 7012, is relatively low hanging fruit for FCA compliance across…
The pace of change across digital is frightening. In the case of cyber and AI 2 years is several life times, as has been clearly demonstrated by the introduction by Open Ai of Chat GPT. It is what makes the…
A nice report from the European Union Agency for Cybersecurity (ENSIA) on the state of cybersecurity maturity of European Critical National Infrastructure (CNI) providers in 2024. While the page 8 of the report provides an indicative, robust, evaluation of the…
