Rachel V. Rose, JD, MBA thank you for sharing. A bit like buses, coming at the same time. This week the EU adopted the text for the EU Cyber Resilience Act (CRA) (), setting out the cybersecurity risk management requirements…
Audit, the third Line of Defense, are a critical function in the oversight, assurance and attestation of cybersecurity risk management. Audit provides independent assurance of compliance to cyber regulation such as the SEC Final Rule, EU NIS 2 or DORA.…
Thank you for posting Olaf Classen. The cyber attack on Varta and its effect on access to capital markets is a consequence of cyber security risk management. Unlike its compatriots in the U.S Varta maybe fortunate as cyber attacks that…
Thank you for posting Chris Hughes ðŸ’ÂðŸâ€Â. The U.S has had FISMA for over 20 years. The U.S DoD adopted Dodi 8510.01(RMF for DoD Systems) and DoDi 5000.90 (Cybersecurity for acquisition decision authorities and program manager) for risk based acquisition…
Thank you for posting Andrew Hoog. @Thaddeus Dziekanowski in ones opinion this is an important Form 8-K submission from Option Care Health, a customer of Change Healthcare. A subsidiary of the UnitedHealth Group. It sends a clear message that cyber…
One of the biggest problems with cybersecurity risk management governance and remediation, is boards themselves. They do not have the knowledge, skills and experience required to manage, oversight, assure and attest cyber risk. Knowledge Skills and Experience regulations such as…
Moving beyond capital and liquidity, as U.S Finance Regulators look to test the the operation resilience of U.S banks. Several notable issues have arose in the past 12 months with banks failing to adequately manage credit risk (Silicon Valley bank,…
@Thaddeus Dziekanowski the attack on UnitedHealth has had a significant impact across the U.S, effecting patient care. An incident that one could consider material to the company and patients. Given the unprecedented magnitude of this cyberattack, and in the best…
The European Parliament adopted the text for the Cyber Resilience Act on Tuesday 12th March. The 338 pages of wording presents a complex arrangement of oversight, assurance and attestation of the cybersecurity of a broad range of products and service…
When you burry your head in the sand there’s one thing that hackers will take great delight in exposing and its not how much money you can afford to pay. If hackers can encrypt your data, they can do so…
