The SEC’s Division of Enforcement has submitted a proposed plan of distribution in the matter of The Kraft Heinz Co. and Eduardo Pelleissone. Kraft Heinz engaged in various types of accounting misconduct through a failure in financial controls, from the…
Along with existing and proposed cybersecurity regulations comes the requirement to ensure that staff are trained appropriately. That ranges from the shop floor to the board room. A requirement of the SECs cybersecurity risk management proposal is for boards to…
U.S markets are usually a bell weather for the rest of us and cyber is no exception. With the lack of skilled and experienced cyber resources the rest of us are in for a shock. Left of bang is on…
In this quarter’s Security Institute magazine I discuss the changes that forthcoming cybersecuriry legislation will have on U.S, EU and UK companies. Driven by regulators pushing cybersecurity ‘left of bang’. Addressing failures in cybersecurity compliance and pushing cyber into the…
An interesting draft for the security of medical devices published by the Food and Drug Administration (FDA), that sets out a comprehensive approach to securing medical devices from the drawing board onwards. Pulling together cybersecurity risk management, cybersecurity framework profiles,…
A very interesting read by the WSJ on the further independent work the SEC has requested into E&Y, if you can access it. It launches a separate investigation, funded by E&Y into the role its manager and lawyers played in…
The SEC has fined E&Y $100Million for cheating by its audit professionals on exams required to obtain and maintain Certified Public Accountant (CPA) licenses, and for withholding evidence of this misconduct from the SECs Enforcement Division. () In addition to…
SEC commissioner Peirce raises concerns about the depth and breadth of the SECs rule making agenda and whether it is overstepping the remit of the regulator. Protecting professional investors over retail investors. One wonders in some instances you have to…
This week the Securities and Exchange Commission published its Spring 2022 rule making list. For those interested in cybersecurity and regulation 3235-AN15(proposed), 3235-AN89(final) and 3235-AN08(final) are the regulations to watch. 3235-AN15(proposed) – cybersecurity, is an addition. One expected the final…
Yodel, the delivery company suffered a cyber attack earlier this week that disrupted deliveries across the UK. Deliveries look to be continuing and the disruption managed. #cybersecurity #cybersecurityriskmanagement #governance #cyberattacks View Original Post
