Following a filing to the US DoE, it looks like the power outage suffered in the Western US states of California, Utah and Wyoming in March this year was caused by a Cyber Incident. But as yet there is no…
Some useful lessons, which followed the Triton attack in 2017. It identified some basic security principles which should have been put it place. Safety critical systems on internet facing networks, poor network segregation and easy credential harvesting. Industrial cyber is…
I say that cyber is an enterprise wide risk, its not a technology issue anymore. Securing the corporate balance sheet is a subject the Chair, CEO and all members of the board must focus on (its a team sport). Unfortunately…
Whilst the top names on Wall Street are out their pushing the Cyber message. Its still worrying that many companies are simply not prepared to respond in the event of an attack. The size of some firms and their interconnected…
Not all threats are made equal. But cyber related risks surely have to take priority over other threats like EMP. The probability of a cyber attack is certainly higher than an EMP burst, and the cost to mitigate the risk…
We’re living in what some call the 4th industrial revolution, one based upon the consumption of data. From a personal perspective, mobile communications and the smart phone are central to that. Although I don’t know if I spend 5 hours…
Slack, the cloud based colaboration provider filed papers with the SEC. Warning that cyber attacks could impact the company. Ahead of its flotation. It’s the right step to take, warning investors that cyber is an issue for corporate stability. One…
With the massive gap between the number of skilled cyber resources needed and skilled resources available, some lateral thinking is needed to close it. The cyber security skills we need have cover many security domains, whichever standard you follow, NIST,…
Facebook isn’t having a good time with global data regulators at present. View Original Post
For any organisation to have remote chance of managing cyber risk effectively, there has to be a focus on what it does and how it does it. It’s about people, process and systems. Processes drive corporate value and processes contain…
