Another report cyber report, this time by PWC that paints a rather unflattering picture of cybersecurity across global industry. It does not matter if 2% or 22% of companies have implemented cyber resilience, cybersecurity or cybersecurity risk management the trend…
@Thaddeus Dziekanowski a sign of the times as another big 4 firm embarks on a restructuring of its operations, creating a “digital delivery unit†focused on tech innovation, AI engineering, cloud and data. Along side a well publicized reduction in…
European Supervisory Authorities the European Banking Authority (EBA), European Insurance and Occupational Pensions Authority (EIOPA) and European Securities and Markets Authority appoint a director to lead the oversight of critical third party providers, established under the EU Digitial Operational Resilience…
A warning of what happens when you pile into cybersecurity with an assumption that the public and private sector are the same animal and why delivering against promises is way, way harder in reality. Cybersecurity is one of those topics…
Sellafield processes nuclear waste from other nations, it provides nuclear power to 1,000s of homes across the North East of England and is CNI. If it were ever to suffer a catastrophic failure then there would be serious repossessions for…
Thank you for posting Brian Levine. We head back to governance, board oversight and assurance. One does not believe as demonstrated by regulators, that there is anyone that gets to make a sole decision, or influences a collective decision for…
The SEC charges a UK citizen with hacking 5 U.S public companies to obtain non-public information, using the information to make $3.75 million in profits. The SEC is charging William Westbrook with violating antifraud provisions of the Securities and Exchange…
Well worth a read. The Federal Communication Commission (FCC) reached a settlement with T-Mobile, that was published this week, for T-Mobiles failures under the Communications Act 1934. T-Mobile has had its fair share of cyber related incidents involving data breaches…
U.S DoD cyber requirements have been a contracted feature of DoD contracts since DFARS 252.204-7012 came into force in December 2017, requiring covered contracts down the down Supply chain to implement NIST SP 800-171. However since its inception 7 years…
The role of the CISO will not get easier anytime soon, all head winds are pushing against the role. Cyber regulation is changing the role quickly; U.S and EU regulators are setting the guard rails for cyber introducing oversight, assurance…
