U.S. National cyber Director said the approach to U.S. Federal cybersecurity and investment is not working and needs to be transformed. He has commented previously on his belief that cybersecurity needs to be managed following a whole of society approach.…
A comprehensive cybersecurity and telecommunications bill has been introduced to Canada Parliament this week, enacting the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national…
For those following the regulatory developments for cybersecurity risk management, continue to read. Last week under the Securities and Exchange Act of 1934 the Options Clearing Corporation (OCC) filed with the Securities and Exchange Commission (SEC) a proposed rule change…
Swiss-re is taking a more cautious approach to underwriting cybersecurity insurance. Choosing to build a body of knowledge of cybersecurity risk, investing in research and development to better understand this line of business ahead of making a decision. Ted Dziekanowski…
The head of the FBIs Cyber Division confirms the DoJ, FBI and CISA are working closely together on cybersecurity oversight. With all sides working to address the issue of liability protections and sharing of breach information. Ted Dziekanowski #cybersecurity #cyberriskmanagement…
In a development for UK Financial Service third party suppliers, the UK government has published a policy statement for mitigating risks from critical third parties to the finance sector (FS), such as cloud service providers. HM Treasury has been working…
Are cyber vendors starting to feel the pinch as economic headwinds affect capital markets. At a time when regulators are looking to enforce cybersecurity? Several factors are coming together in the cyber market place. The tightening of capital market liquidity;…
Great picture: The challenge for the CEOs of public utilities, and those of public U.S. companies if the SEC gets its way, is that the solution to cybersecurity risk management is not about software products, cyber about risk management. I’d…
A history of the 2022 cybersecurity announcements by the Securities and Exchange Commission (SEC). A great read from the NLR that provides a concise picture of the relevant announcements made by the SEC this year. Focusing upon cybersecurity assurance, legislative…
An important read. Federal Cybersecurity oversight of the U.S. DoD DIB makes a broader comeback in the latest draft of the 2023 NDAA. As the House Armed Services Subcommittee on Cyber, Innovative Technologies, and Information Systems voted to approve its…
