Thank you for posting Olaf Classen. If correct and the ransomware on its Swedish data center is a severe as reported, and that some of its clients have lost 20 years worth of data as both product data and backups…
NIST has released an update to its guidance for implementing the security requirements for the Health Insurance Portability and Accountability Act (HIPAA), NIST P 800-66r2. Originally published back in 2008, requiring a refresh. Revision 2 looks like a overhaul of…
Cyber attacks are pealing back the underlying code used by software vendors, exposing source code and SDLC risks. Risks that transpose into third party supplier risks for customers and potentially material risks for shareholders. In the case of Ivanti, it…
This is a great article. It pulls together the corporate challenges faced by companies when they undergoe a cyber attack, and at the same time going through a restructuring. What makes it a great article is Varta, the company affected,…
Thank you for posting Olaf Classen. The EU NIS 2 and Resilience of Critical Entities (RCE) are important EU Directives for the protection of Critical National Infrastructure(CNI) and Services. They are complex directives for EU member states to transpose into national…
Thank you for posting Olaf Classen. The Dutch, now the Danes, wait for the next country to follow now precedence has been set. What does this tell us about cybersecuirty risk management in EU countries. Compliance to NIS will be…
The U.S Insurance Information Institutes (Triple I) report published 02.07.24 is an interesting read in setting out the challenges the cyber insurance industry and those it insures face with cyber. As with all reports we have to use the figures…
A bill first introduced to the Canadian Parliament in the spring of 2022 (Bill C-26) compelling companies to manage cybersecurity is moving forward. Amidst criticism that it been idling for nearly 2 years, at a time when Canadian banks report…
The Federal Communications Commission (FCC) published rules on the Federal Register 02.12.24, effective 03.13.24, to modernize data breach notifications. In response to the growing frequency and severity of data breaches. In a 37 page Final rule the FCC expands the…
Thank you for posting Olaf Classen. One does not think the challenge is one of perpetrators being afraid of the German Justice system, or nation state justice systems in general. Cyber is an international problem and there is little will,…
