Last week the U.S Department of Homeland Security issues its after-action report on the Lapsus$ hacking group. What does it mean for the state of our collective cybersecurity when a loosely affiliated hacker group, some of them teenagers, can compromise…
Ted Dziekanowski Materiality, Adequacy and Reasonable are the words that are important with the SEC final ruling. They are words that are both objective and subjective, as far as the SEC ruling. Objective in terms of having regulatory definitions, and…
Boards of U.S listed companies have to oversight, assure and attest material risks, irrespective of the SEC Final ruling on cyber for many years. Cyber has always been a material risk, tested to a lesser degree under SoX since 2002.…
In the past weeks I have given 2 notable presentations to both business leaders and the insurance industry on cyber regulation. In both cases I have reaffirmed the conclusion, in the enclosed article, that there is a lack of concern…
One wonders given Chinas ability to be able to bring the resources to bare to address a problem. The chances, if any, the West has in building the necessary capacity and capabilities to address cybersecurity, if China changes gear on…
One cannot underestimate the degree of change that has been proposed by the U.S Executive Office through the March release of its ONCD cyber strategy and the subsequent implementation plan (July 2023) Ted Dziekanowski. The implementation plan pulls together many…
A great article from the Japan Times highlighting the challenges that Japan faces with cybersecurity. Especially the cultural challenges of an aging population and poor levels of cyber knowledge of its leaders, the challenges that Japanese organizations face with technology…
The report for the Australian Governments Joint Committee of Public Accounts and Audit, highlights some challenges with cybersecurity compliance under the Governments Protective Security Policy Framework (PSPF). It sets out Australian governments protective security policy and supports entities achieve outcomes…
Brian Levine thank you for posting this. It is a really important post and any security professional should read this with great care and attention. As cyber regulation develops, cyber attacks increase in frequency, severity and complexity the decisions that…
Thank you Brian Levine for posting. CISOs not only require legal protection. With several articles published recently looking at the skills CISOs need to operate in the board room. There needs to be a reality check by boards and CISOs…
