The EU and its public and private sector organisations face a more significant issue from cyber regulation. While the EU has recently released the EU NIS 2.0 directive and a draft proposal for Digital Operational Resilience Act (DORA), requiring tighter…
An appropriate refresher from the Securities and Exchange Commission (SEC) on the role of audit. Audit is critical to regulatory compliance, providing investor confidence and boards with the appropriate oversight and assurance of both financial and non financial risks. Long-recognized…
The CMMC AB has rebranded itself at the ‘Cyber Accreditation Body’. A move that may get some cybersecurity accreditation bodies in the industry interested, especially if it plans to spin out its cybersecurity training. One wonders what will happen when…
Some organisations are gearing up for the SECs proposed cybersecurity risk management, governance, strategy and incident disclosure legislation. The Augusta group has a tried and tested program for boardroom cybersecurity risk management governance, strategy and implementation. Supporting boards comply with…
The U.S. has plenty of cybersecurity and risk management standards, that are aligned to FISMA and OMB A-130. FISMA has been adopted by he DoD under DoDI 8510.01 with derivatives across DoD branches and NIST SP 800-30, 800-37 and 800-39…
Maybe the theme for this years RSA conference is security Industry transformation? With a recognition that cybersecurity has to change in light of the failures of organisations to manage cyber risk. Demonstrated by recent high profile cyber attacks that include…
The historic city of Palermo has taken the step of shutting down all its IT systems, in the face of what is believed to be a attack by Pro Russian Hackers. Ted Dziekanowski #cybersecurity #cyberriskmanagement #governance #regulation #italy View Original…
The consequences of Cyberattacks don’t go away. With a British Columbian court certifying a class action seeking damages on behalf of Canadian Credit card customers following the 2019 Capital One compromise, where Canadian citizens had their data compromised. Ted Dziekanowski…
Well worth reading. The U.S. is moving forward with Federal data protection, with lawmakers releasing Bi-Partisan draft data legislation called the American Data Privacy and Protection Act. In line with other jurisdictions such as the EU and their GDPR. ()…
Space Force seems to be moving quickly with its cybersecurity program? Rolling out cybersecurity requirements to commercial providers. The Space Force Infrastructure Asset Pre-Assessment (IA-Pre) program will require satcom providers to get on-site, third-party assessors to validate their compliance with…
