The UK Information Commissionaire Office (ICO) and National Cybersecurity Center (NCSC) have issued a joint statement and advice to the UK Law society with about on paying ransomware. Lawyers should not advise clients to pay ransomware demands should they fall…
Along with existing and proposed cybersecurity regulations comes the requirement to ensure that staff are trained appropriately. That ranges from the shop floor to the board room. A requirement of the SECs cybersecurity risk management proposal is for boards to…
The impending wave of cyber regulation coming from US, EU and APAC regulators maybe good for the insurance industry. For one it sets the standards and expectation for cybersecurity risk management and secondly it means the insurance industry does not…
Thank you for posting the enclosed article Tony Ridley, MSc CSyP MSyI M.ISRM. We have seen more cybersecurity legislation and regulation develop in 2022 than in any previous year. Backed by regulatory enforcement programs such as Department of Justices Civil…
Cybersecurity regulation and enforcement are developing, rapidly driving cybersecurity risk management compliance. Requiring Boards and cybersecurity professionals to oversight, assure and attest cybersecurity risks and compliance. The Securities and Exchange Commission’s cybersecurity risk management proposal, EU NIS 2.0, the EU…
Cybersecurity is being regulated whether organisations like it or not. Cyber is well documented to present such a significant threat to organisations and society there are few alternatives. That is not to say that regulations will be so descriptive or…
It feels like cyber audits are coming thick and fast. A very comprehensive audit by the Department of Justice(DoJ) Inspector General that evaluated the DoJ Cybersecurity-Supply Chain Risk Management Compliance (C-SCRM), through the Justice Management Division(JMD) and FBI, and their…
Uber data breach reveals EU Lobying, favourable support, a significant warchest for regulatory reform and data security controls to prevent raiding police from accessing files. Ted Dziekanowski #cybersecurity #databreach #regulatoryaffairs #compliance View Original Post
U.S markets are usually a bell weather for the rest of us and cyber is no exception. With the lack of skilled and experienced cyber resources the rest of us are in for a shock. Left of bang is on…
An important audit from the U.S Government Accountability Office (GAO), ‘Defense Industry Base – DOD Should Take Actions to Strengthen Its Risk Mitigation Approach’. It is one of many recent GAO reports that articulate the risks posed by the DIB…
