Yes, cybersecurity requires promotion; yes, cybersecurity requires UK businesses to adopt the right tools to manage cyber risk. But this is like politely asking you to put up a picket fence when your neighbours have erected a 10-meter-high barbed wire…
Dutch data protection regulator Autoriteit Persoonsgegevens (AP) published the enclosed topical paper on the need to control AI, or face a Wild West of AI risks. Risk that will be difficult to manage as Gen AI consumes data at an unprecedented…
Stefan Eder, thank you for posting this paper. Its is an important read and formalises the issues that we have been working to resolve with cybersecurity adoption of AI. Specifically, autonomous agent deployment and operation within a closed world vs.…
The role of internal audit cannot be underestimated as cybersecurity regulation takes shape across the EU and the US. EU NIS2, EU DORA, and the US DoW CMMC program all place a burden on internal audit to provide assurance of…
A survey from the European Union Agency for Cybersecurity (ENISA) on EU-wide investment in NIS2 compliance. The report makes for an important and yet sobering read. While it is always difficult to recognise answers given in surveys, especially at such…
EU member states are busy transposing and complying with EU NIS2, and it’s highlighting the compliance challenges faced by member state CNI providers. NIS2 raises the cybersecurity compliance bar significantly for CNI providers and has exposed the EU-wide cyber skills…
An interesting read from The Alan Turing Institute on profiling UK AI Governance, which raises questions about the UKs approach to the oversight and assurance of AI. It’s a useful paper that pulls together international approaches to AI governance and…
In recognition that cybersecurity is a significant risk to the US Federal Government and the important role of the US General Services Administration(GSA). The GSA announced earlier this year that it is implementing the Cybersecurity Maturity Model Certification program, following…
CMMC is a legal minefield for both assessors and those being assessed. The U.S. Department of Justice and the United States Department of War are committed to robust oversight of compliance. Those offering advice and guidance to the DIB have…
Gerry Kennedy, an interesting report from the National Association of Insurance Commissioners (NAIC) on the cyber insurance market in the US and also reported here According to the NAIC report, across all policy types, 3 times the number of…
