Out with the old and in with the new for the security leadership at Microsoft. Microsoft is a behemoth of an organisation, whose attack surface is one of the biggest in the world and whose product and organizational complexity creates…
It is a pleasure to be included in the 2023 influencers edition of the International Security Journal (ISJ). Some not all the predictions made for 2023 have been realized. 2023 saw a significant increase in the frequency, severity and complexity…
EU cyber risk regulation will play a significant role for boards of covered Financial Institutions(FI) in Europe in 2024. The Digital Operational Resilience Act (DORA – ) is one such regulation that EU FIs will have to contend. It is…
Thank you for posting Olaf Classen. As we move towards electrification of the transport network, security is paramount. If you cannot secure the user interface and manage basic certificate security, what does that say about the risks to the EV…
Ted Dziekanowski I thought everyone was doing AI, you’re not a tech firm unless you are doing AI. There’s a simple test to find out if a company know what its doing with AI. You ask how a company is…
The GAO has completed and assessment of federal Agency response to cyber incidents as required by FISMA and OMB and CISA guidance. The GAO identified 23 Agencies covered by the CFO Act 1990 have made progress in preparing incident response…
It is a pleasure to have been included by the International Security Journal (ISJ), as an influencer in security for 2023, along side colleagues from across industry. Cybersecurity is major influence on National, Economic and Societal security and 2023 has…
A great paper from the Harvard School of law highlighting the challenges S&P 500 firms will face when it comes to complying with the SEC Cyber governance rules. Especially when it comes to filing material cyber risks and material cyber…
Cyber risk management oversight will be a focus of SEC examination in 2024. With the continual increase in cyber attack frequency complexity and severity of impact. We will see covered entities undergo cyber attacks in 2024 and declare material cyber…
My concern for the security community is that there are several planets aligning that cannot be controlled. Whose affects will be felt by security professionals. the case of the SolarWinds CISO will be far from the last. 1. Cyber regulation…
