Regulation sets the guard rails that we work within, irrespective of national, industry or regulations set by professional associations. The same is true for cybersecurity with a range of regulators starting to define the basic requirements for cybersecurity risk management.…
It was a pleasure speaking with you Brian D. McCarthy on our Friday webinar, as we discuss the work we at Veritas GRC are doing to educate boards on cybersecurity risk management and regulation. We see regulatory challenges ahead for…
@Thaddeus Dziekanowski, one suspects that the U.S Senate Committee on Finance took the feedback provided by the CEO of United Health on the 1st of May 2024 seriously. The enclosed draft Bill proposes updates to the U.S Social Security…
A very important moment for U.S cybersecurity regulation, and an important moment for executives of U.S healthcare companies responsible for cybersecurity. As Senators. Ron Wyden, and Mark Warner put forward a Bill to amend the Health Insurance Portability and Accountability…
Happy to share that I’ll be speaking at Board Cybersecurity Governance and Regulatory Compliance.! Make sure to attend it today. View Original Post
The European Central Bank has released an update to its guide on Governance and risk culture replacing its 2016 SSM supervisory statement on governance and risk appetite. The update pulls together the strings of corporate governance, risk management and risk…
One wonders if the challenges ahead for cybersecurity and risk transfer is not one of insurance price increases. But more one of how boards and CISOs will manage risk transfer? Cyber attack frequency, complexity and severity show no signs of…
A problem all boards face with cybersecurity risk management is providing adequate oversight and assurance over complex cybersecurity risks. It requires dedicated focus by management and as Microsoft highlights a structure of cybersecurity professionals across all lines of business. @Thaddeus…
It’s not just ICS/ OT environments that should care about Governance and compliance over cyber risk. Governance and compliance is core to cybersecurity risk management and if demonstration were needed one only has to look at current and pending U.S…
AI delivers many benefits. For cyber it has to move Left of Bang if boards are going to demonstrate compliance to US and EU cyber regulations. AI needs to support boards through their risk assessment processes, from inherent through residual…
