Potato, potahto anticipatory governance or governance. Boards need to focus ‘Left of Bang is they are to get ahead of risk.Taking a proactive approach to risk management and ultimately being able to demonstrate oversight and assurance of risk assessment, as…
Lies, lies and damn statistics or so they say. It’s quite difficult to pin point the origin of a cyber attack, but its safe so say that the likely hood of AI being used as a tool for cyber attacks…
At the time many column inches were written about how the UK primary nuclear operator was managing cybersecurity, but it transpired it was not. The successful prosecution of Sellafield was a small demonstration that the UKs nuclear regulator was willing…
Cyber attacks are big business, it’s no more complicated than that. Cyber crime has profit margins greater that cocaine production and distribution, at over 90%, no barriers to entry and there’s little chance of being caught.Technology is moving way faster…
There’s only one road ahead for cyber insurers and the insured and that’s proactive management of cyber risk.As we discussed with Ryan Buckner of Schellman at Schellman Con yesterday, boards need to take an active position in the oversight and…
America first, maybe, good practice most certainly. As we start to see the emergence of cybersecurity regulation passed by US Law makers.The Federal Contractor Cybersecurity Vulnerability Reduction Act passed through the house this week. A bill that would require covered contractors with…
The UK government published a report this week, commissioned in 2023, on the prevalence and quality of cyber disclosures by UK companies. The answer to the question could have been summed up in 2023, as companies in general in the…
A nice article on the balancing act between legal liabilities and the management of cybersecurity. Cybersecurity and cybersecurity professionals have faced a the legal challenge for some time, but it is not at expense of addressing cybersecurity. All cyber regulation…
I’d like to thank @Thaddeus Dziekanowski for his work in cross walking NIST AI RMF and ISO 42001 with a number of other cyber, AI and security frameworks. As part of the development of our board governance over AI program,…
To monitor or not to monitor those pesky nation state threat actors. On one hand the US Defense Secretary is reported to have told the DoD to stop offensive cyber activities against Russia as talks with Russia continue. On the…
