I am looking forward to today’s conversation on the SECs cybersecurity proposal with the The Institute of Internal Auditors Inc. Ted Dziekanowski, the more you immerse yourself into the SECs proposal, the more you understand that the SECs requirements are…
Are we at a pivot point with cyberspace and the application of international law? Traditional rules of engagement and domains of operation do not apply in cyberspace and cyber related attacks are difficult to trace and legally enforce. This is…
A Norton Rose survey identifies cybersecurity as an area of concern for litigation by corporate General Councel. With Financial institutions increasingly feel more vulnerable to cybersecurity-related disputes as compared to other industries, with 79% of financial institution respondents reporting feeling…
Well worth a read. Last week the chair of the SEC discussed the importance of cybersecurity with the Financial and Banking Information Infrastructure Committee (FBIIC) and Financial Services Sector Coordinating Council (FSSCC). The importance of the public and private sector…
We have created a cybersecurity risk TOM, governance and risk framework for SEC compliance. There is no simple scorecard when one looks at a CSF profile that includes business and mission objectives and governance. How many controls do you have…
Thank you Christopher Hetner for publishing. Cybersecurity risk management and cyber security are not the same. Boards will be required to implement, assure and report risk compliance. A requirement many security professionals will find difficult to manage and one that…
The Securities and Exchange Commissions (SEC) proposal for Cybersecurity Risk Management will have a significant impact on public companies that list on US Capital Markets, including foreign issuers. With recent and on-going developments in US cyber regulation and the SECs…
Gary Gensler the chair of the SEC discusses the recent proposal for climate reporting and a brief history on long tradition the SEC has in disclosure and its relevance to climate related disclosures. Over the generations, the SEC has stepped…
In a move to regulate the cybersecurity industry in Singapore. The Singapore Cyber Security Agency (CSA) has taken the step of licencing cybersecurity service providers. To safeguard the interests of customers, help them identify credible providers and, with time, improve…
Are cyber insurers bracing themselves for a large cyber incident, through single points of failure that have a consequential impact on other domains, such as an attack on CNI? Cyber is only an insurable risk with intervention from the cyber…
