Along with EU NIS 2 and DORA the CRA is a critical leg of the EU’s coordinated strategy for cybersecurity. The development of the EU Cyber resilience Act is well underway. The Swedish government recently took over the EU presidency…
Is cyber an economically insurable risk today, likely no. Insurers rely on ‘Right of Bang’ data to price the product. Data that represents ‘events’ and ‘outcomes’, events and outcomes that are unpredictable and increasing in frequency, complexity and severity. Life…
Thank you for posting Ted Dziekanowski. I wonder if the challenge ahead is more one of setting a baseline for cybersecurity compliance, working and enforcing it. It is clear that the U.S is not the only nation that has struggled…
If you can get to this article, it is well worth reading. Not for its ESG discussion, but for the regulatory and compliance challenges between the U.S and EU. In this case if the U.S does not develop an equivalent…
An interesting situation for the DoD following the recent publication of sensitive information, and a request from the defense secretary to evaluate DoD data security. With all the cybersecurity and information security regulations and programs Federal agencies and the DoD…
We are fast approaching Module 2 of our Cybersecurity risk management program for U.S Attorneys. As we present U.S and EU regulatory highlights and compliance considerations on the 11th May. The U.S president has signed several cyber and supply chain…
This is a very interesting report created by Willis Towers Watson and Clyde and Co. Discussing the results of a survey of the top concerns for Directors and Officers, as related to Directors and Officers (D&O) Insurance. It is not…
This is a very useful post by the CIS, demonstrating the complexity of cybersecurity compliance. Compliance that is compounded further by U.S and EU regulatory requirements to implement cybersecurity risk management. Requirements that necessitate organizations to implement a risk management…
It is positive to see NIST releasing their latest update draft to NIST CSF 2 – (). Bringing further clarity to organizational context, roles and responsibilities, risk management and supply chain security within corporate governance. Especially the importance of business…
Cybersecurity risk management regulation will drive the fiduciary responsibilities of boards and individual board members. As some regulation sets out requirements for board to seek external guidance for cybersecurity. Whether this is through NEDs hired onto the board or through…
