The legislative calender for cyber will kick off in September with a bang with the 2023 NDAA capturing legislation that the Financial Services sector objects. Ted Dziekanowski #cybersecurity #cyberriskmanagement #cyberregulation View Original Post
I’ve written several times about the GAO reports that formed the foundation for both U.S DoD DFARS and CMMC programs, and the implementation of cybersecurity. The GAO identified issues in DoD weapon system cyber security back in 2018, and is…
Ted Dziekanowski an eqeletic mix of comments to the SEC cybersecurity risk management proposal. Many focus on incident reporting and board ownership. Plenty for, plenty against. The response from the Bar Association is worth a read. One wonders which way…
The SEC has had a cyber enforcement unit for 5 years, delivering $2billion in settlements. It is in the process of expanding its enforcement team adding 20 staff. Including fraud analysts, investigative staff attorneys, trial counsels, and supervisors. One expects…
I presented to The Institute of Internal Auditors Inc. in quarter 2 on the impact of Geopolitics and cyber. Cyber is a significant geopolitical risk, threat actors operate at nation state, criminal and in the grey space between the two.…
The SEC starts its crypto oversight and assurance journey with a bang. Ted Dziekanowski #crypto #regulatorycompliance View Original Post
The international DIB plays a critical role in U.S national and international defense a d security. For example the F35 relies on many EU contractors. Contractors that create, process, store and transmit CUI. CUI that is regulated to be protected…
Thank you Christine Janesko and The Institute of Internal Auditors Inc. for considering me as the Expert for your August edition. Cybersecurity regulation is developing internationally and cybersecurity risk management are significant challenges ahead for many companies. The role of…
A sector that is cash strapped and generally a slow adopter of tech, making it a target for cyber crime. At a time when attacks and the cost of compliance is rising. #cybersecurity #cyberregulation #cyberriskmanagement #compliance View Original Post
Cyber regulation in the EU, APAC and U.S has common themes. One theme is management oversight, assurance and responsibility. In some instances requiring board members to report their cybersecurity expertise to regulators. Cyber regulation is moving to risk management, requiring…
