As predicated, and to quote a well known film staring Adam Sandler, the SEC final ruling on cyber is ‘opening up a can of whoop-ass’. Not only requiring covered entities to disclose material cyber risks and incidents (See our Bloomberg…
It has been a privilege working with U.S Attorney Rachel V. Rose, JD, MBA and Ted Dziekanowski, on the enclosed article published by Bloomberg Law. In which we evaluate the Securities and Exchange Commissions final ruling for cybersecurity (Effective 5th…
It is a pleasure to be quoted in the Wall Street Journal (WSJ) this week. Discussing recent cybersecurity industry layoffs, and the opportunities that cybersecurity risk management regulation such as the SEC final ruling, will bring to the cyber industry…
NIST is moving forward with its assessment of public comments for NIST SP 800-171 and revision to R3. A document that is influential for covered defense contractor compliance to DFARS 252.204-7012. It also provides one foundation for what could be…
Corporate America is concerned about the timing of the SEC cyber ruling. While the timely reporting of material cyber incidents is Important. It is by far the least consuming of the rule. Disclosure and management of material cyber risk is…
The thing about cybersecurity risk management is that you are never surprised, this is no exception. Not by the statement that Asset Management is included in corporate cyber risk assessment, but that it’s a consideration. You cannot manage cyber risk…
UK audit firm Crowe UK LLP, its CEO Nigel Bostock and seniors auditor Matthew Stallabrass has been charged by the SEC for the firm’s deficient audit of music streaming company Akazoo Limited. Crowe issued a clean audit of Akazoo 2018…
The SEC whistleblower program is a well tried and tested program. It has dealt out over $1Billion to whistleblowers, paying between 10% and 30% of the money collected. That is an indication of the total fines levied against those companies…
A very important read for CISOs, Board Directors and Officers. In February 2023 we wrote a paper with respected U.S Attorney Rachel V. Rose, JD, MBA and Educationalist Ted Dziekanowski entitled ‘U.S and EU cybersecurity regulation enforces cybersecurity risk management…
The Clock has started ticking for compliance to the Securities and Exchange Commissions ruling on Cybersecurity Risk Management Strategy, Governance, and Incident Disclosure. The effective date is the 5th September 2023. U.S Domestic and Foreign Private Issuers covered under the…
