For anyone who has an interest in cybersecurity and are reflecting on the testimonies of the CEO of United Health on the 1st May 2024. One recommends watching the first 25 minutes of the enclosed. It is a conversation by…
At yesterdays Committee hearings on the United Healthcare cyber attack, the CEO was at pains to say that one reason his systems were compromised was they were held on Prem. If the effected systems were in the cloud then they…
For those with an interest in the recent United Healthcare cyber attack the enclosed will be of interest. As the CEO of United Health has been asked to attend testify in front of the U.S Senate Committee on Finance and…
This makes for interesting reading. The Testimony of the CEO of United Health ahead of the testimony of the CEO of United Health CEO, to the Energy and Commerce Subcommittee of Oversight and Investigations. Amongst other things, confirming that United…
Between a rock and a hard place. A clear example of why banning the payment of ransomware, is an impossible mission to follow for governments and regulators, in the absence of any alternate solution. Albeit in the case of United…
Cybersecurity and Enterprise Wide Risk are at the top of the Audit Committee Agenda as cybersecurity risk management regulation transfers cyber risk into the boards rooms of covered entities. A risk that may receive more prominence if PCAOB proposals to…
The U.S accounting regulator, the PCAOB, wants audit firms to take on more responsibilities for the detection of fraud. That includes greater oversight of cybersecurity risks (). Changes that members of the audit profession see as an overhaul of the…
UK and Australian export laws do not meet the standards expected by the U.S under the AUKUS partnership. Whose success requires the integration of disparate industrial, regulatory, security and trade frameworks, as well as development, production and fielding of high-tech…
There’s a slow awakening that EU NIS 2 and DORA are on their way and they will affect the boards of covered entities, that includes the potential for civil and criminal penalties and temporary board suspensions. In Ireland alone over…
The U.S DoD has worked out that Defense in Depth is the right way to go to secure its networks, and that the CISA strategy of Continuous Diagnostic Mitigation () has to be implemented. @Thaddeus Dziekanowski, the DoD is also…
