Here’s a new twist in cybersecurity risk management. One that demonstrates the focus investors and the investment community are starting to pay attention to the lack of cybersecurity risk management of companies. In the case of Line Yahoo a Joint…
Cybersecurity Risk Management is critical to the stability of all public and private sector organisations. Both the U.S and EU regulators have taken a bold step in requiring some organisations and their boards demonstrate governance, oversight, assurance, and attestation of cybersecurity…
A document that is well worth reading for any company making a written response to a U.S Senate Committee, as United Health (UH) responds to questions raised by U.S Senate Committee on Finance. The response raises many more questions than…
A great and comprehensive article from the Harvard Law School Forum on Corporate Governance Faisal Khan, following the latest court tussle between the SEC and SolarWinds (15th May 2024). A case that is ‘a first-of-its-kind action asserting fraud and internal…
A thought provoking article following the UnitedHealth Cyber attack. Should corporate boards be concerned about what happens next for United Health. If the SEC and FTC start an investigation (it appears from the press that they have) into the February…
Noah Barsky, thank you for including me in your post, it is appreciated. The Senate committee and corresponding letter are precedent setting. The Committee chair made clear that the United Health incident was a risk to National Security; the committee…
If CISOs want to survive we have to change the cybersecurity message. Having a nimble response to cybersecurity issues as they arise, is not going to address the cybersecurity problem that organisations face. Cybersecurity risk management regulation is doing that.…
We have a crisis in cybersecurity knowledge, skills and experience; we have an environment in which security professionals cannot work; and we’re introducing cyber regulation that is going to increase workload, require new competencies from the board room to the…
A great read, EUs assessment of its cybersecurity skills gap, including the gaps in awareness, education and recruitment. () The EU is not alone. All nations have the same challenge with the Cybersecurity skills gap, and its not just a…
Allan Alford, I like the taste of realism. The CISO is the the only role that wants to sit at the board table, but has no professional standing to site along side there peers. A role that lawyers and regulators…
