Adopting the principles of the three Line of Defense (3 LoD) is an important step to cybersecurity risk management regulatory compliance. The 3 LoD model was developed by the The Institute of Internal Auditors Inc. and adopted by many regulators,…
Yesterday Veritas GRC and Schellman held a webinar discussing cybersecurity risk management and regulatory compliance. Talking about the importance of building a coordinated approach supporting boards comply with cybersecurity risk management regulations, and our commitment to work together to build…
Who will sell out who out first? The cost to the U.S economy from the UnitedHealth cyber attack is in the $10s Billions. Trying to locate the ALPHV Blackcat group is of course important. But one wonders if you can identify…
There maybe trouble ahead…………….every measure that one can think of is going against companies, when it comes to cybersecurity and risk management. Cyber attacks are rising, complexity of attacks is increasing and the costs of fixing the outcome of cyber…
U.S Federal Agency Health and Human Services, Office of Civil Right (OCR), is investigating UnitedHealth Group and Change Healthcare following their February 2024 cyber incident. An incident that had a significant effect on the healthcare industry across the U.S. ()…
Between 12:15ET and 12:45ET on March 28th Ryan Buckner and I will be hosting a lunch and learn, discussing the recently signed MoU between Veritas GRC and Schellman. To create and deliver board cybersecurity risk management education programs to the…
A speech by the chair of the Securities and Exchange Commission Gary Gensler, favoring and justifying mandatory disclosure. ‘The basic bargain that President Franklin Roosevelt and Congress laid out 90 years ago was that investors get to decide which risks…
Cybersecurity risk management regulation is a challenge public and private sector firms will have to face. Regulators in the United States and European Union are moving ahead with enforcement regimes, requiring boards of organisations operating in or with the U.S…
Well worth a read. Cybersecurity is a national and international problem, requiring international collaboration. Harmonization of cybersecurity risk management regulation, strategy, governance, education and standards. All of which are important if we are to securely manage global trade, national and…
A survey report by the UK government on the status of cybersecurity of UK industry, as part of its continual oversight of the status of cybersecurity risk management. Statistics of cybersecurity compliance always make for an interesting read as they…
