A data breach from California’s Department of justice Firearms Dashboard portal occurred this week. It Exposed the personal information individuals who were granted or denied a concealed and carry weapons (CCW) permit between 2011-2021. The hack came at a time when the…
An issue for Crypto in Europe. Anti Money Laundering and terrorist financing legislation was highlighted as an issue back in 2020 (). Regulated for under European AML/ CFT rules that was meant to bring crypto under its remit. The move…
A skill shortage that will only get worst before it gets better. U.S. and EU legislation, regulation and enforcement programs that are on statute or in the pipeline are going to increase the burden on organisations across all sectors. Raising…
An interesting article from McKinsey (just hit my in-box) on targeted recruitment to address the shortage in cybersecurity talent and reduce cybersecurity risk. With developments in cybersecurity risk management legislation ‘left of bang’, such as EU NIS 2.0, DORA and…
Cyber insurance brokers are finding it very difficult on the front line. Premium prices are up, coverage is down and there is more scrutiny of controls. Loss rations have dropped slightly with the increase in premiums, indicating insures are still…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
A very interesting read by the WSJ on the further independent work the SEC has requested into E&Y, if you can access it. It launches a separate investigation, funded by E&Y into the role its manager and lawyers played in…
An important read. Strong words from SEC commissionaire Hester Peirce, following the announcement to fine E&Y $100m for its unethical behavior in managing audit professional continuing education and the material misleading response made to the SEC following its requests for…
The CISA website has plenty of CSF profiles and an implementation guide for CSF profiles for the Defence Industry Base (DIB). CSF profiles are required by FISMA (and the DoD – DoDi 8510.01) and implemented by the SEC. I wonder…
The SEC has fined E&Y $100Million for cheating by its audit professionals on exams required to obtain and maintain Certified Public Accountant (CPA) licenses, and for withholding evidence of this misconduct from the SECs Enforcement Division. () In addition to…
