This is definitively a read from the Wall Street Journal (). We may have a case that raises the question of ‘Adequate’ cybersecurity risk management compliance, as SolarWinds comes out fighting over last weeks SEC charges against the company and…
A very good question, why does cybersecurity pose a significant risk to the public and private sector given all the funding put into managing cybersecurity? As a 20 year cybersecurity and risk professional one believes it has a simple answer.…
Ted Dziekanowski this is a very real concern. While partner nations move ahead with cyber regulation the UK has made a decision not to this year. The SEC cyber rule, EU NIS 2, DORA, U.S and Canadian CMMC and Australian…
An interesting article on what CISOs should report about an incident. Here is my take, as someone who has been a counsel appointed cyber expert and witness and an executive that has led regulatory reporting of cyber incidents. The first…
Thank you Chris Burt for inviting me to discuss cyber regulation and cyber risk with the risk Coalition. Cyber regulation is moving quickly in the U.S and EU, requiring covered firms demonstrate their management of cyber risk, that includes cyber…
An efficient cyber insurance market is required with “experience, innovation, and collaboration†is needed to sustain growth, which comes against a backdrop of price increases in this line moderating, as well as concerns about systemic risk The cyber insurance value chain…
Ted Dziekanowski cyber regulation transfers risk Left of Bang, as cyber regulators set the baseline compliance requirements for boards and cyber professionals of U.S Capital Markets; New York Covered Financial Entities (NYDFS); soon to set the baseline for CNI and…
Defense primes, specifically those on U.S Capital markets face a much bigger problem than CMMC when it comes to stakeholders, that is the SEC final cyber rule. There is no doubt that the DoD is a critical customer to defense…
All risks are insurable, the question is how economic is it to insure the risk. The answer for cyber insurance is likely not very economic. We wrote in 2022 () that managing cyber risk through insurance was not going to…
Deloitte Canada has been fined $1mn for breaching CPA Ontario Code of Professional Conduct. Auditors changed the date and time settings on their computer clocks to backdate audit working paper signoffs. ‘PCAOB inspectors uncovered evidence of the creation of documents…
