Sitting within the Executive Office, the U.S National Cyber Strategy forms a foundation for U.S cybersecurity regulation. As demonstrated by the recent announcement by the Department of Homeland Security (DHS) for the safeguarding of Controlled Unclassified Information (CUI) (), setting…
What is interesting is that the U.S Department of Treasury has made clear that payment of ransomware to individuals, organizations or jurisdictions on OFAC is a breach of regulation, that comes with heavy penalties. While one is not aware of…
Pleased to say that we ran, with Rachel V. Rose, JD, MBA Ted Dziekanowski, a cyber education program accredited by the Celesq Attorneys Education Center, for U.S Attorneys in April, May, June and July this year. To enable U.S attorneys comply…
One has a controversial question: It is very clear that the DoD needs to secure the DIB and that compliance to DFARS 252.204-7012 has not been met. But is CMMC needed, or has it been surpassed by recent cyber regulatory…
The MoD has launched its secure by design program, to implement cybersecuirty into the product life cycle of UK defense programs. ‘Ensuring the responsibility and accountability for cybersecurity sits with the programme and project teams who understand the systems and…
There are much bigger issues ahead with the S in ESG as those FS institutions will be assessing to the cyber risk associated with the cyber risk of defense Contractors. Last weeks SEC cyber ruling effects UK defense contractors FIs…
Spare a thought for entities covered by the Australian Prudential Regulator, following the announcement by the SEC to regulate cyber. The APRA will expect boards of covered entities to oversight cybersecurity. 1. APRA says boards are ultimately accountable for operational…
Very concerning, this will likely be hunting for a needle in a haystack, the U.S has procured Chinese power and communications equipment for many years. For CNI where one suspects there is little redundancy. It begs a question, given the…
One would argue Ted Dziekanowski that there needs to be common agreement between the U.S and partner nations on harmonising cybersecurity regulations and standards. You cannot expect UK organisations that operate cyber essentials (there are very few of them) to…
Boards of U.S listed companies have to oversight, assure and attest material risks, irrespective of the SEC Final ruling on cyber for many years. Cyber has always been a material risk, tested to a lesser degree under SoX since 2002.…
