Members of Congress have written to the Chair of the SEC raising their concerns over the SEC final cyber rule, specifically the 4 day incident reporting timeline. What interests one with the attention that incident reporting gets is that the…
Cyber insurance underwriting has always been an art and one expects it will remain so for some time to come. As cyber insurers get to grips with the fact that Right of Bang data does not correlate with an organizations…
If remotely true, this is a concern. As UK partners are moving ahead with cyber regulation that has a direct effect on market participation and trade. In simple language if for example you are a covered entity and cannot comply…
The UK Government has £880k (excluding VAT) to spend on proposals to help reduce cyber risk across defense. I have a proposal for the MoD to manage cyber risk. 1. Oversight and implement DFARS 252.204-7012. The DoD cybersecurity standard that…
With the SEC final cyber rule effective, what lens will be used to evaluate the SolarWinds cyber incident of 2021? The SEC final rule was not effective at the time, but the SEC has always required covered entities to oversight,…
The Australian Financial Services regulator the Prudential Regulatory Authority (APRA) continues to make its intentions now that it will strengthen supervision and enforcement of operational and cyber risk management practices. With the release of a new cross-industry Prudential Standard CPS…
Over the past 6 months we have seen several cybersecurity firms reduce headcount and re-evaluate their financial performance. At a time when the tech industry, PE and VC has been doing the same. But we are at a time when…
The SEC is not so much on a mission to tame America’s financial markets, it’s on a mission to protect investors, maintain fair, orderly, and efficient markets, and facilitate capital formation (its mission) One must not forget that U.S capital…
A whistleblower reported the Electoral Commission failed a cyber essentials audit, prior to its 2021 data breach. If the commission could not pass the most basic cybersecurity audit. What hope was there ever going to be they could withstand a…
This is a great paper, it captures the essence and impact on Directors and Officers Liability and insurance. ‘What is Next for the Risk of Cybersecurity-Related Litigation?’ The SEC final cyber rule effects corporate risk transfer, playing with the traditional…
