Nostradamus calls it Ted Dziekanowski. CISA has aligned itself to CSF profiles for some time across many industry sectors. The SEC and EU is proposing cybersecurity risk management regulations that require a cybersecurity risk management framework; FISMA is aligned to…
Last night the UK Attorney General Set out the UKs position on cybersecurity, international law and the need for a clear framework for cybersecurity, that make clear when state action is unlawful. Treating a cyber-attack the same as a physical…
Should Chief Compliance Offices (CCO) be held accountable for failures in corporate governance, that participate in Securities Law violations? Could the same apply to CISOs for failure to comply with cybersecurity and data protection violations? Ted Dziekanowski #cybersecuirty #securitiesandexchangecommission #securities…
The regulatory agenda for cybersecurity risk management is developing as are the roles of the cyber, legal and risk professional in regulatory compliance. Providing oversight and assurance of cybersecurity risk management to the board room and in turn regulators. That…
A nice article on the importance of Enterprise Wide Risk Management and ESG from the American Bankers Association. It describes the importance of the risk function in ensuring and promoting safe and sound practices, supporting strategic goals for ESG. The…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
A really nice speech given by the Chair of the SEC, Gary Gensler to the North American Securities Administrators Association (NASAA) on investor protection in the digital age. Discussing investment bias in analytics, systemic risk concentration and crypto. Reinforcing some…
A great overview of DORA, if it becomes law. Time will codify ICT risks under DORA for EU Financial services firms as DORA takes precedence. DORA is significant legislation for EU Finance firms, placing requirements on organisations to manage their…
Regulatory compliance in the U.S. especially in the areas of Sanctions, Cyber and Crypto is creating a compliance headache both for Federal agencies and their intended recipients. While Sanctions are not new, the convergence of AML, ESG, Cybersecurity and Crypto…
The increase in regulatory scrutiny of cybersecurity will require a closer working relationship between cybersecurity, regulatory compliance, risk management and legal. As global regulators such as the SEC and those in the European Union focus in on cybersecurity risk management,…
