As the cyber incident at Change Healthcare continues to cause disruption. One wonders the effect, with Moody’s and Fitch taking different approaches to evaluating UnitedHealth’s credit worthiness. The financial impact of the incident may not be material to the company…
The Australian government has released guidelines setting expectations for company Chairs and Directors to govern, respond and recover from a cyber incident. Expectations that are in line with Action 5 of the 2023-2030 national cyber strategy. Providing clear guidance to…
This is well worth watching. Rachel V. Rose, JD, MBA and @Thaddeus Dziekanowski are both accomplished in their respective fields of law and cybersecurity risk management. As cybersecurity regulations such as the SEC final cyber rule, EU NIS 2 and…
The Australian government has released guidelines to hold company directors accountable for cybersecurity risk management during and following a cyber incident. Requiring Chairs and company directors demonstrate their governance over the response to a cyber incident and ensure their company…
Water is Critical National Infrastructure (CNI), it sits up there alongside Power Generation, Oil and Gas and Healthcare. By example U.S water providers have faced significant threats from Nation State actors over the passed 2 years and it is well…
When considering the NIST CSF one does not always consider how integral U.S Federal Government made the CSF, in its cybersecurity. The Office of Management and Budget (OMB) places reliance on the use of Cybersecurity Framework Profiles by Federal Agencies…
This is an important read for those following the MGM (and Caesars) cyber attacks in 2023, and possible State and Federal Regulatory Oversight. Last week MGM submitted its 2023 10K, that discussed the companies cybersecurity risk management oversight and assurance.…
Thanks for posting @Thaddeus Dziekanowski, will we start to see more accountability placed on boards to manage resilience and cybersecurity, following last weeks mobile outages and the concerns raised to congress about nation state cyber attacks? (). With the Secretary…
When one reads MGMs 2023 annual report you are struck by the oversight the company has paid to cybersecurity risk management. What is noticeable is the lens MGM has placed on cyber, following the 2023 cyber attack, oversight by State…
It was going to happen, State and Federal investigations into the 2023 cyber attack. MGMs 10K submitted on Friday highlighting some financial challenges. The loss of $100 million following its 2023 cyber attack, while not likely financially material, an investigation…
