At a time when the bank was flush with cash, there was no CRO for a significant part of 2022, the ALM committee and Board committees failed to spot the issues with changes to the banks risk models and there…
Thank you Stephen Pitt-Walker, JD, FGIA, board accountability for cybersecurity is becoming a front and center issue, and one not just for Australian companies. But one for boards of all covered regulated entities. Ones not convinced that Australia is behind…
German audit regulators are taking a strong line with EY, banning the firm from new audits in Germany. The two-year ban is quite a severe sanction which we have not seen before in Germany,⬠said Klaus-Peter Naumann, chair of Germany⬢s…
One wonders the role of the whistleblower as cyber regulation develops. One also has to ask what regulators expect from internal audit and external audit as materials could become admisable. Following the posting earlier today by Stephen Pitt-Walker, JD, FGIA,…
Cyber regulators require a risk based approach be adopted for cybersecurity. A risk based approach requires a knowledge of the organisation, its strategy, business operations and financial planning. Cyber risk management and cybersecurity are not the same. Many organisations will…
A great example why boards need to provide oversight and assurance of cybersecurity. Boards cannot manage whistleblowers. With U.S Federal whistleblower programs paying upto 30%, in some cases over $100mn of recovered funds. Ted Dziekanowski #cybersecurity #cyberriskmanagement #whistleblower View Original…
£12.7mn fine for Tik Tok failing to protect the privacy of 1.3 million children. Should this not be a higher fine? View Original Post
On the 30th March 2023 the U.S Food and Drug Administration (FDA) issued guidance to ‘Ensure Cybersecurity of Medical Devices’. The Refuse to Accept Policy under section 524B of the FD&C Act was effective on the 29th March 2023 and…
As Lloyds cyber exclusion clauses for ‘state backed cyber attacks’ come into effect one suspects that it is going to face challenges. Firstly being able to attribute a hack to a named group, or individual with enough certainty to pass…
Last week Ted Dziekanowski and I published a paper on Cybersecurity Risk Management, the Risk Management Framework (RMF) and the important role the Cybersecurity Framework (CSF) profile plays in risk mitigation. (). That we align within a TOM for cyber…
