Thanks for the share Bryan Foss. The regulatory process underpinning the EU Digital Operational Resilience Act (DORA) starts. As the EU European Banking Authority has authorised in-depth examinations at thirteen technology suppliers deemed as providing critical services to the financial…
If there is any doubt about the complexity of cyber regulatory compliance, then you only have to look at the education expectations being placed on the management of covered German companies by the Federal Office for Information Security (BSI) for…
The U.S. Securities and Exchange Commission announces its examination priorities for 2026, and fiduciary standards or conduct, the effectiveness of compliance programs, and cybersecurity risk management remain a priority for the SEC. @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC…
Intriguingly, the debate about banning ransomware payment continues. The ban was originally in response to a coordinated approach across several nation-states, which have remained stubbornly quiet about banning ransomware payments. There is no evidence that banning ransomware payments either supports…
The UK Defence industry is reliant on decisions made outside of the UK for funding. The Italian owner of a helicopter factory in the UK has warned that it can’t keep subsidizing the factory in the absence of contracts from…
The UK cyber insurance industry only paid out £197 million in 2024. Or about a third of the cyber spend of an average systemically important bank. Or 197% of the expected payout against Jaguar Land Rover, a single company, a…
There is a reason the DoD did not adopt a risk-based approach to CMMC. For full organisation compliance to over 101 controls takes well over 18 months and is a significant cost when applied to all data types. On the…
Simone Herbert-Lowe opens up another regulatory lens focused on cybersecurity risk management. Highlighting the direction of travel being taken by the Australian Securities and Investments Commission (ASIC) on corporate governance, oversight, and assurance of cyber risk in the boardroom of…
The United States Department of War is overhauling its acquisition process to promote competition, reduce bureaucracy, and speed up delivery of capabilities to warfighters. The overhaul will replace the current program executive office structure with a new portfolio acquisition executive,…
Thank you for the post Bryan Foss. The bigger threat to the UK by Russia is cyber, not direct kinetic warfare. A threat that has been demonstrated over the past 6 months alone to be vulnerable to. The challenge the…
