Last week marked a milestone in EU cybersecurity. With EU NIS 2.0 (EU Network and Information Security) and DORA (Digital Operations Resilience Act) moving forward to ratification by EU Parliament and Council members. The impact of either should not be…
Thank you for sharing Ted Dziekanowski. The U.S. Government through CISA and NIST has developed several CSF profiles for Critical National Infrastructure (CNI)(). Including Health, the Defence Industry Base, Manufacturing and Transportation, and the American Bankers Association (ABA) has a…
Ted Dziekanowski, an interesting read as EU NIS 2 moves forward. With the Securities and Exchange Commissions (SEC) proposals for cybersecurity risk management for firms with access to U.S. Capital markets and the US DoD DAFRS/ CMMC program that impacts…
Know your enemy and know yourself to build an effective defence. Cyber threat modelling along-side vulnerability assessment and a clear managed enterprise wide architecture are important components to cybersecurity risk management. However this is the challenge. The Securities and Exchange…
The Chair of the SEC Gary Gensler this week reaffirmed his view that Crypto assets are securities, and should fall under the purview of the SEC. That has recently bolstered its crypto and cyber team. Ahead of U.S. regulators looking…
A thank you to Brad Monterio, Peter Lucas, MBA and Tahmina Day, M.B.A. for arranging and participating in yesterdays U.S. The Institute of Internal Auditors Inc. webinar on Geopolitical disruption. It was a pleasure speaking at such a well attended…
This article from legal counsel is well worth a read on cloud security, security regulatory frameworks and data security that I know my colleague Ted Dziekanowski will comment on. It summarises the ‘shared responsibility model’ that cyber professionals and legal…
A proposed legal outcome that is worth taking note between the Federal Trade Commission and CafePress (). Following CafePress data breach incident in 2019. ‘In addition to a fine of $500,000, the Settlement requires CafePress to undertake a variety of…
This week the U.K. MoD released its cyber resilience strategy, a vision outlining its cyber plans for defence. It comes at a time when cyber regulation and plans of partner nations are more advanced than those of the U.K. The…
A great summary of the recent Aerojet Rocketdyne case and its place in setting the agenda for the DoJs Civil Cyber Fraud initiative, thanks Ted Dziekanowski. While the details of the settlement are yet to be disclosed. The case sets…
