While the cybersecurity community gets engrossed in the SEC Cyber final ruling. A thought should be paid to the enclosed from the Securities and Exchange Commissions Chief Accountant ot the oversight of crypto trading platforms by audit firms. Why? The…
With the U.S ONCD, EU, Australia and Federal Agencies incuding the SEC, TSA, DoD and FTC amongst others, all moving forward with cyber regulation. Harmonisation and reciprocity is important. U.S and EU market and industry regulators have chosen in general…
The SEC has now finalized cybersecurity risk management for companies covered under the Securities and Exchange Act 1934, that includes foreign registered companies. It is a significant cyber regulation, with global, cross sector impact. A regulation that if past SEC…
The Chair of the SEC and Commissionares approved the SEC cyber final ruling 3:2 Ted Dziekanowski. Reporting cyber compliance in annual reports starting on or after 15th December 2023 and 18th December 2023 for incident disclosure. Now the work begins,…
A great article on the challenges with managing the big four consultancys. A shake up maybe needed, regulation is most certainly required and forced separation and chinese walls will continue. But the fact remains no one ever got sacked for…
Certification does not a cyber professional make. Nor are they a bad thing, especially given the challenges we face with managing cyber risk. But we have to recognise the gaps between certifications and the experience and skills need to comply…
An important vote on the SECs proposal to regulate public firms that access U.S capital markets takes place today. ‘Will they, won’t they’ is the question. With cyber attack frequency, complexity and severity of impact rising; with other nations regulating…
Dan Lohrmann, a problem with cyber certifications is they are assessed at a single point in time, they are created and certified by bodies that themselves are not necessarily authorised and accredited by a governing body, like auditors or accountants…
Covington must hand over the names of some of its clients effected by a data beach in 2020. Striking a middle ground as the court ordered Covington to provide the SEC with the names of 7 public companies effected by…
A great suite of analogies for the road ahead for cyber insurance Ted Dziekanowski. I would probably add a slow train wreck waiting to happen, not necessarily for the insurance industry. As the article points out, ransomeware is not slowing,…
