A great article on the changing agenda for US cyber security by MIT. Market forces have not worked as well as they could for many companies addressing cybersecurity. US government cybersecurity leaders are voicing that it is time for a…
Cybersecurity and the role of the board. Congress, CISA, the Securities and Exchange Commission and Department of Defence have pushed cybersecurity risk management into the board room. The SEC proposals are akin to Sarbanes Oxley, coming at a time when…
A great thorough summary of what US public firms can expect if the Securities and Exchange Commission (SEC) cybersecurity proposal makes it into regulation without significant modification. For Foreign Private Issuers note the Summary point 5, as the proposal applies…
A very important read for cyber security and Critical National Infrastructure (CNI) in the US. The US president signed into law the ‘2022 Consolidated Appropriations Act’ containing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (the Cyber Incident Reporting Actâ€). …
US congress and Federal agencies are moving quickly with various Federal cybersecurity legislation to secure critical national infrastructure and public and private sector organisations, require incident reporting, and the implementation of appropriate cybersecurity practices. The SEC last week proposed cybersecurity…
Could the convergence of CMMC 2.0 and last weeks proposal by the SEC for cybersecurity risk management, strategy, governance and incident disclosure be the mechanism to kick start cybersecurity across the US global DIB? Previous attempts by the DoD to…
The EU has moved a step closer to regulating crypto assets, following a EU Parliamentary committee vote this week, with 31-4 in favor of a new draft of the Markets in Crypto Assets (MiCA) framework, with 23 abstentions. The committee removed a provision…
Germanies Federal Office for Information Security (BSI) is recommending that Russian information technology business could be a source of both information and a platform for cyber attacks and they should be replaced. The BSI recommends Kaspersky anti-virus products are replaced with alternatives…
An interesting question Ted Dziekanowski. If the SEC presses ahead with cybersecurity risk management proposals as indicated, what will be the impact on public defense contractors in the case of DoD DFARS regulations? With the potential of having to report…
An important read for those following US cybersecurity risk management and regulatory enforcement. The US Department Of Justice (DoJ) announced the first resolution under its Civil Cyber-Fraud initiative using the False Claims Act (FCA). Investigated by State Department OIG and…
