The World Economic Forum publishes inciteful documents and reports. The March 2021 report on the Principle for board governance of cyber risk is one of those reports. Cyber is one of the top risks board face, its up there alongside…
The UK Government has moved forward with new telecoms security laws. A new bill aims to strengthen security standards for telecoms vendors in the UK and provide new powers for the UK government to impose controls on providers use of…
I have made several comments on the SEC whistleblower programme over the past months. The SEC has moved further to strength the programme, one which it sees as an important tool in the governance and oversight of its covered entities.…
For those of us in the security profession there is plenty of cross over between cyber security control frameworks, be that ISO or NIST and other regulatory requirements. SoX has from its inception focused on Access to Programmes and Data…
A very interesting read. I would say that there is a different culture to whistle blowing in the US than in most other countries. There is a tendency to reward whistleblowers out of the funds received from fines from successful…
A great article from HBR, highlighting what boards need to do in setting the cyber risk agenda. Building cyber governance, audit, risk assessment and the need to focus to outcomes such as the risk appetite, customer, shareholder and regulatory expectations.…
Well worth a read. When what you don’t know or cannot prove may kill you, or at the very least hurt? There are plenty of data protection and cyber regulations out there, granted allot are US based. But they do…
One to watch and thank you Mahbubul Islam CSyP for this article. The article raises a number of interesting points, which security professionals should be aware when they deal with a hack, as the boundaries between law enforcement and cyber…
Securing the corporate balance sheet is good for everyone. Shareholders, customer, suppliers and employees. CMMC will come with a cost and an assessment of economic value. Which should be made with the broader consideration of the balance sheet, not just…
A date for the diary 26.10.2020. First American Insurance looks to be the first company to be charged under NYDFS NYCRR 500. The charges allege that between October 2014 and May 2019 the company allowed access to over 885 Mn…
