An interesting read published by Deloitte Center for Board effectiveness and Center for Audit Quality in March 2024. Evaluating the priorities for audit committees and the challenges, opportunities and improvements in audit committee effectiveness. Cybersecurity regulation across the U.S and…
Dr. Daniel Schatz, CSyP thank you for posting. Cybersecurity risk management is a regulated risk, making it a legal and compliance and governance risk. A risk requires legal, audit, risk and cyber oversight and assurance by the board. The Third…
This event will be great. Please come and listen to @Thaddeus Dziekanowski and Brian D. McCarthy discuss the SEC Cyber Rule and how the Certified Information Security Manager (CISM) certificate program can support those involved in supporting organisations meet their…
What is happening to the cybersecurity sector? One is trying to understand why are we seeing such turbulence across the whole cybersecurity eco system. At a time when cybersecurity is the most significant risk sitting at the board table? There…
The SEC Division of Corporate Financing has published what can be described as an advisory notice on the reporting of cybersecurity incidents under the SECs cyber rule, effective 5th September 2023. The ‘advisory’ relates to the reporting of cyber incidents…
Assurance is a critical point of discussion, that goes way beyond digital infrastructure, SDLC and the resilience of hardware, software and firmware. Assurance is key to the oversight of the whole cybersecurity risk management value chain and cybersecurity risk management…
We started writing about the adoption of the RMF, DoDi 8510.01, reciprocity and how the DoD, and other agencies can address cybersecurity risk management through reciprocity back in 2021. We called our strategy the Augusta Plan and presented to several…
It’s an obvious statement worth repeating, cyber insurance is an important tool for any company wanting to mitigate the effects of a cyber attack. But are cyber insurers ‘chasing the dragon’, as we see a decline in direct written premiums…
This is a good read, worth every minute. A very Poignant and timely update from Bert Hubert. Discussing the challenges we face with cybersecurity. In what maybe described as a Pre-War state, and why we will never take cybersecurity seriously…
If correct and the company at the center of the deepfake payment of £20mn, was the UK engineering firm Arup. It raises several concerns for the company. Arup is a UK multinational with 90 offices spread over 35 offices. In…
