The U.S midterms we’re not as bad as predicted for the Democratic party, but they created challenges for both House’s. Cyber should be a bi-partisan issue with both sides wanting to address cybersecurity for the sake of national security? With…
As always thanks for posting Ted Dziekanowski, you make good points. I would say that the U.S has made more effort than most countries to address cybersecurity. It has been the lead country with cyber regulation, cyber enforcement actions and…
In 2022 I have supported the Institute of Internal Audit many times with papers, fireside chats and webinars on subjects across cybersecurity and the 3 lines of defence. I am looking forward to presenting next week at the French Institute…
European port infrastructure is critical to NATO deployment and recent questions about its ownership and security has exposed lines of division and an EU plan of action to bolster its cyber defence. Ports and transportation infrastructure are CNI for both…
A great read to start the week. MITs assessment of cybersecurity defence assessing cyber defence across the 20 largest and digitally forward economies globally. Assessing critical infrastructure, cybersecurity resources, organizational capacity, and policy commitment. The result show some surprises with…
The U.S DoD cyber program CMMC is one example of cyber programs working their way through to boards of defense contractors that are likely to increase legal risks. The CMMC is 1 of 4 DFARS that originate from 2017 when…
For those interested in cybersecurity specifically the U.S DoD DFARS/ CMMC program, it maybe time to consider what to do about it. Given NIST SP 800-171 has been a requirement since 2017 (www.cmmc-eu.org). There are a few issues that the…
The SDLC is complex and open source code is used to save time an money on code development. The challenge is knowing what is in opensource code, maintaining updates and patches and you have no idea what is being collected…
If FTX were regulated as a Financial Services firm under a Central Bank regulator. It is likely they would have been required to hold regulatory capital under Basel regimes. Holding regulatory capital against credit, market and operational risk. With continual…
Well worth reading. The EU is working to strengthen its cybersecurity defence to address the deteriorating security environment created by the Ukraine Russia crisis. Aiming to enhance cooperation and investment in cyber defence, working to enhance situational awareness, establish an…
