A recent report highlights the vulnerability of critical infrastructure. Attacks that took place in March, July and August 2021 targets water treatment facilities in California, Maine and Nevada using different ransomware threat vectors. CISA, FBI, NSA, and the EPA published…
A great report that highlights in my view the whole of government approach being taken by the US over cybersecurity. The US Department of Treasure (DoT) specifically the Financial Crimes unit (FinCEN) has been busy focusing on cybersecurity and ransomware…
I am looking forward to speaking at AFCEA (the Armed Forces Communications and Electronics Association) on the 4th November. Discussing the developing cybersecurity and risk management legislative agenda in the US, and existing regulations that could impact on the UK,…
An article well worth reading if you supply products and services to the Federal government. The enclosed article points to the use of the FCA as part of the wider toolkit being adopted by the President of the US to…
The US Department of Justice (DoJ) confirmed the launch of its Civil Cyber-Fraud Initiative on the 06.10.2021 and its powers of enforcement under the False Claim Act (FCA). ‘The initiative will hold accountable entities or individuals that put U.S. information…
The cyber insurance industry is profitable. But Direct Loss ratios for cyber insurance saw a significant increase between 2019 (47.1%) and 2020 (72.8%), and is expected to rise according to Fitch ratings, no doubt on the back of ransomware. We…
Are corporate cyber-risk management practices upto the task of protecting shareholder value? Do boards understand the very simple fact that cyber is an enterprise wide risk, that touches all aspects of an organisations financial statements, cashflow, balance sheet and income?…
The paper associated with the enclosed post is a very interesting read. Australian regulators plan to move ahead with cyber regulation, focusing on Cyber risk governance and standards for companies not already covered by sector standards, such as Financial Services.…
US Federal Government is on a role of cybersecurity announcements as it drives ahead with legislation and implementation to protect National Infrastructure from Cyberattacks. The announcement by the Department Of Justice (DoJ) that it plans to use the False Claims…
A very useful report from the Congressional Research Services that provides some clarity on the legality of ransomware prosecution, ransom payments and related Federal Laws (note the reference to FISMA). The report explores the legal issues and potential approaches for…
