It’s been a pleasure for Veritas GRC to have supported the ECIIA | European Confederation of Institutes of Internal Auditing, Pascale Vandenbussche and their dedicated team of internal audit professionals develop their guide to the EU AI Act for internal…
What happens to our data and what does it mean when you tick those boxes accepting the Ts and Cs on the contract.The data flows down the analytics value chain and we rely of third party providers to protect our…
Bob Dix, one is equally amazed why no one ever takes hold of FISMA and just implements and enforces it. The US has regulation, executive orders and legal process coming out its ears. All it takes is for government to…
An important post Brian D. McCarthy, as Old Republic International develops Cyber and Technology Errors and Omissions insurance products. As cyber regulation develops board and corporate responsivities and legal risks increase.D&O and E&O insurance will develop as cyber insurers conclude…
@Thaddeus Dziekanowski, the U.S Federal Drug Administration (FDA) has issued draft guidance recommendations to industry on the submission AI enabled devices and software functions.It’s a robust read at 67 pages. Worth a scroll though as it sets the agenda for…
Target Rich, Cyber Poor’Maybe the statement defines the cybersecurity of U.S Critical National Infrastructure (and other nation states), better than any other?@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation View Original Post
Thank you for posting Olaf Classen. It is positive to see German cyber regulator discussing the need for cyber education. Education that is both top down and bottom up. Boards are responsible for corporate governance and have fiduciary responsibility to…
A nice paper by Michael Kranawetter on the future of cybersecurity risk management. Boards play a strategic, pivotal, role in the management of cybersecurity risk. A risk that is an issue for national, economic and societal security and a risk…
Thank you for posting @Thaddeus Dziekanowski, well worth watching.One can argue it’s difficult to pull together an unbiased view of the challenges the U.S (and other nation states) face with cyber and nation state threat actors access to U.S infrastructure.However,…
“If you can’t measure it, you can’t manage it†is often attributed to Peter Drucker, and in part it is a truism. One says ‘in part’ as the level of management depends on the amount of accurate information available defines reasonable…
