A lot is being talked about recently of cyber incident response and paying ransomware fines. From past experience I can say that when you are in the middle of a cyber attack, the last thing you were initially thinking about…
The New York Department of Financial Services (NYDFS) has updated it’s cybersecurity regulation. Enhancing a risk based approach to cybersecurity oversight and assurance. That includes updates on board governance, risk assessments, education and training that are similar to the SEC…
With the U.S mid terms drawing to a close, providing some clarity for the future. Can we expect the SEC proposal drop over the line soon? Ted Dziekanowski #cybersecurity #cyberriskmanagement #securitiesandexchangecommission #theaugustagroup View Original Post
‘Everyone needs to know where the puck is going and have a basic plan of how to get there.’ Cyber is a complex, regulated and resource intensive risk to manage, and a risk insurers are finding difficult to effectively underwrite.…
Cyber has an ‘insurability limit’, how do you mind the protection gap? I would estimate that the figure of uninsured cyber loses is higher than 90% if you use the Swiss Re method. 98% of businesses globally are SMBs, and…
Supporting the Federal Reserves Financial Stability report, global economics are at the front of concerns for G20 business leaders, overshadowing Climate and cyber risk. Along with a global down turn we are seeing an increase in cyber activity. The ‘interlinking…
Thank you Brad Fraser for including me. Sadly the report outlines the common challenges that many organisations face and a problem we can expect to get worst before it gets better, as we heading in to the economic downturn. But…
Another interesting story from Australia that relates to cyber. The latest drone to roll of the production line at Chinas Aerospace Science and Technology Corporation (CASC) called the FH-97A looks remarkably similar to Boeings MQ-28 Ghost bat. The Ghost Bat…
Some may say a stark reality check, but it demonstrates the relationship between securing corporate IP and national security. There is never one side to a story. But when your adversary plays a very long game it is important to…
CISA must publish cyber incident reporting to enact the Cyber Incident Reporting for Critical Infrastructure Act, and address the historic voluntary approach taken for cyber incident declarations. But industry has been pushing back, raising concerns about declaring sensitive incident information…
