Cyber attacks do that. JLR announces a fall in sales by as much as 40%, following the 2025 cyber attack. Resulting in a quarterly loss of $500million. Cybersecurity requires boards to take their oversight and assurance of cybersecurity seriously. US…
Germany’s Federal Office for Information Security (BSI) is pressing ahead with the implementation of NIS2, under its leadership for cybersecurity and responsibility for the protection of the nation’s infrastructure. The BSI estimates that over 29,500 companies and institutions in Germany…
A paper definitely worth reading from the International Monetary Fund on Good Practices in Cyber Risk Regulation and Supervision. In response to the growing threat of cyber attacks on financial stability. Consolidating approaches adopted across Financial Services regulations and capturing…
Cybersecurity remains a priority for SEC examinations in 2026, along with the use of AI for upcoming amendments to Regulation S-P and S-ID, as cross-functional risks for covered entities. Cybersecurity and operational resilience threats are being amplified by the adoption…
For those interested in the US DoW CMMC program and are covered by the Foreign Military Sales (FMS) Program, then this is worth consideration. As CMMC compliance may be a corporate differentiator for doing business with the U.S DoW under…
The pace at which CMMC is moving out across the DoW and its branches is increasing. We are starting to see DoW branches require CMMC requirements in specific solicitations, notices affirming that CMMC will be added into solicitations, and, as…
The effect of the application of DFARS 252.204-7021, or as it is known, CMMC, by the United States Department of War is starting to be felt. The John Day Dam is a large hydroelectric gravity dam on the Columbia River, near…
Here lies a problem for UK industry as demonstrated by the 2025 hack on Jaguar Land Rover. All roads lead to cybersecurity for the UK defence. It’s an issue the United States Department of War recognised 10 years ago and…
@Thaddeus Dziekanowski and Brian D. McCarthy, I try and stay away from predictions for another year in cyber. As is invariably what has been said in the past has come to fruition. But I thought that I’d push out a…
The European Union is updating the Cybersecurity Act (CSA) in 2026. To address the evolving role of cybersecurity across the EU, accounting for developments in cloud AI and cybersecurity regulation across the Union. @Thaddeus Dziekanowski Brian D. McCarthy European Union…
