How lucky do you feel’, a great summary from Gurbir Grewal to leaders of the Securities Bar. Discussing the benefits of cooperating with SEC investigations. The SEC offers up five principles of effective cooperation. All obvious stuff yet one expects…
Cyber remains a top risk with the ecomonic and regulatory compliance. No surprise there then. ‘Mid-market organizations are operating in an increasingly complex and volatile business environment requiring a more proactive approach to risk identification and mitigation.’ The challenge companies…
An Australian court has rejected a request by Optus, the Australia firm hacked in October 2022 to keep the forensic report completed at the time of the hack private. The court rejected an appeal by Optus, following a lower court…
We need more popcorn, as the SEC vs. SolarWinds case continues. The SEC responded on the 24th May to Judge Hon. Paul A. Engelmayer, in response to the latest SolarWinds challenge. Disputing that it neither distorted facts nor intentionally omitted…
If CISOs want to survive we have to change the cybersecurity message. Having a nimble response to cybersecurity issues as they arise, is not going to address the cybersecurity problem that organisations face. Cybersecurity risk management regulation is doing that.…
We have a crisis in cybersecurity knowledge, skills and experience; we have an environment in which security professionals cannot work; and we’re introducing cyber regulation that is going to increase workload, require new competencies from the board room to the…
A great read, EUs assessment of its cybersecurity skills gap, including the gaps in awareness, education and recruitment. () The EU is not alone. All nations have the same challenge with the Cybersecurity skills gap, and its not just a…
Material, Reasonable, adequate are the core tenets of the SEC final cyber rule (). It’s a challenges that boards face and must reach a conclusion on, not just for incident reporting. But to demonstrate they are managing material cyber risks…
The UK National Cyber Security Center has released a ‘Code of practice for software vendors’, and the need to raise cyber resilience of software. The code emphasizes the need to implement Secure design and development, securing the build environment, secure…
Allan Alford, I like the taste of realism. The CISO is the the only role that wants to sit at the board table, but has no professional standing to site along side there peers. A role that lawyers and regulators…
