John Mackenzie AARPI GRCP M.ISRM NIT.SIG MAISA training is always used as the way to solve the problem, it’s not unique to Australia. But cyber requires more than training, it requires recognition by Industry that cyber is a problem and…
U.S Federal government has had risk management in place for 20 years with FISMA, a risk based framework for the management of cybersecurity (information). FISMA unfortunately has had a patchy implementation with a poor record of compliance across Federal government.…
Underwriting cyber insurance has taught the re-insurance industry allot about underwriting complex, catastrophic risks, that one assumed they already knew a lot about? Lloyds recently announced that it would not support the underwriting of Nation State Attacks, that is likely…
The SEC appears to have taken a dim view of VMware breaking financial reporting rules and moving revenues between quarters. By what appears to be controlling the timing of its revenue recognition by placing discretionary holds on selected sales orders.…
Is there a slow realization that companies will need to implement cybersecurity risk management practices if they want cyber insurance? Cyber legislation may come to the rescue of the insurance industry. Current cybersecurity risk management proposals and regulation looks to…
Thank you for posting Ted Dziekanowski. The SEC proposal is one of several recent cybersecurity risk management Directives, Acts and proposals submitted by U.S and EU regulators in the 1st and 2nd quarter 2022. That include the requirements for cybersecurity…
Several nations are moving to protect Critical National Infrastructure from cyber attack, through proposed legislation and regulations. The UK is developing regulations and a code of practice for Electronic Communications (Security Measures) and draft Telecommunications Security. To address the risk…
The recent NATO hack of data from Portugal and the MBDA hack demonstrates that critical data can be taken from secure sources. The DIB has been criticized several time by the GAO for its lack of cybersecurity, that resulted in…
Working as the former European Head of Ops Risk and Cyber for a Japanese corporate bank I learnt allot about Japanese culture, passion, quality, vision and mission. The Japanese steadfast focus and dedication to the mission, meeting targets and working…
Great to support the The Institute of Internal Auditors Inc. this week. We had an important conversation about current internal IT control frameworks such as COBIT, the enterprise risk framework COSO and the developing cyber regulatory environment. A pleasure to…
