We’ve commented quite a bit on NIS 2 over the past year. We’ve created, tested and educated boards on digital, corporate governance, risk transfer, risk management, security programs and regulatory compliance. NIS 2 and DORA, along side the SEC final…
The Crypto cases keep on rolling as the SEC has announced that it is suing the cryptocurrency company NovaTech. Saying it raised over $650 million from more than 200,000. In what appears to be a ponzi scheme, using new investors…
Faisal Khan, it’s the ‘G’ in ESG that’s getting more shareholder attention, and in one opinion rightly so. As the G, governance, provides the framework, oversight, assurance and attestation required by boards to demonstrate the management of all other risks.…
Federal contractors may find that their obligations to meet cybersecurity requirements getting harder. As the GSA and the DoD move ahead with cybersecurity risk management requirements as part of compliance to Federal Contracts. While the enclosed article seems to imply…
One seems to remember at the time Sellafield denied failures in its cybersecurity. While there was no threat to national security, the UK Nuclear Regulator the Office of Nuclear Regulation highlighted vulnerabilities as far back as 2022. A contractors was…
Delta airlines has filed an updated 8k to the SEC, following the 19th of July Crowdstrike incident. On the downside the incident is estimated to have cost Delta $380million in customer refunds for cancelled flights and compensation and non fuel…
How many members of Parliament have stood up and presented the Crowdstrike incident and it’s effect to their peers? Josephine Teo the Minister for Digital for Singapore did. Explaining the challenges of the interconnected digital world and the cyber regulations…
A nice summary of the root cause issued by CrowdStrike following the 19th of July incident. More meat to add to the bones of litigation lining up following the incident. That goes someway to justifying the Crowdstrike, Microsoft legal strategy…
Australia, China, UK. It’s a bit of a annus horribilis for PWC. The big 4 auditors are being held account to auditor standards, as they should be. Who can boards trust to support their governance, risk and compliance to cyber…
One waits to understand the full impact of the Crowdstrike incident and suspect it’s going to be way north of the $5.4 billion quoted. For the simple reasons that the incident had a bigger blast radius than Not Petya; impacted…
