Staff retention issues at the SEC may put a break on the SECs plans for regulatory changing 2022. With 2022 seeing more 26 regulatory proposal put forward, 5 more than the next highest year 2019. 2022 is a demanding year…
If the recent FTC proposed order against the Drizy CEO, following the 2020 cyber attack is anything to go by (). What will the SEC do to target CEO and board pay following a cyber attack. It’s not a big…
The U.S whistleblower program has been a useful tool in the arsenal of compliance. Will a recession drive more people to raise whistleblower claims? The DoJ has been gearing up its Civil Cyber fraud initiative and cyber has been tested…
A good read for Chief Compliance Officers and CISOs in the Investment Management industry. Investment advisors advising more than 60 million accounts with combined assets under management of over $100 trillion. The risks associated with cyber and cloud are a…
Primes and their smaller tier suppliers have had challenges in complying with U.S DoD DFARS requirements for cyber. Will breaking up contracts make cyber compliance easier or harder? Could this approach enable the Navy to apply direct oversight of tiers…
It gets harder. The U.S pulled the UK and MoD up on its cybersecurity in the 2023 NDAA. So one hopes there is a cyber strategy in place to implement security across digital programs for the protection of data loss,…
Thanks you for posting Ted Dziekanowski. U.S regulators appear to be lining up with regulations or consent orders. Along with the SEC requiring companies to claw back bonuses, the Federal Trade Commission proposed this week that the CEO of Drizly…
We wrote a paper last year as part of a CMMC discussion, that explained why cybersecurity compliance was a problem for SMEs and the impact of cyber on the broader supply chain.(). The equation is simple. SMEs/ SMBs make up…
The U.S healthcare sector has been going through some difficult times recently with cyber attacks. It is no surprise therefore that the sector is a focus of cyber regulation and standards setting. An interesting statement was made. The US is…
Legislative proposals on both sides of the Atlantic aim to require ICT and digitally enabled hardware and software manufacturers to provide a certificate of security compliance. If passed the EU is working on the Cybersecurity Resilience Act that will require…
