Are companies adopting a conservative approach to cybersecurity risk management reporting. Or are they taking a safer line with 8K filings for the time being. As the regulator has not yet clearly responded to the information that it has been…
One suspects that we are heading towards more sticks than carrots Rachel V. Rose, JD, MBA, if the recent spate of cyberattacks and their effects on U.S national healthcare systems are an indicator. The problem for both regulators and the…
A great article and a good question from the WSJ and MIT. With reported U.S data breaches up 78% in 2023 from 2022 and up 72% from 2021 yet spending on cyber spend is at an estimated $188 billion globally…
@Thaddeus Dziekanowski, an important read. We rely upon the maritime industry for many of the products we consume. Over 80% of the volume of international trade in goods is carried by sea, and the percentage is even higher for most…
Great to see you discussing the SEC Final Ruling Brian Walker as the debate around the ruling grows, and the role of corporate governance, the 3 line of defense and requirements for management oversight, assurance and attestation develop. Ted Dziekanowski…
With the development of cybersecurity risk management regulation the responsibility of board and executive teams for the oversight and assurance of cybersecuirty risks will change. Cyber will become a regulatory, compliance and legal risk, as it is driven left on…
Thank you for posting Stephen Pitt-Walker, JD, FGIA. The Australian Critical Infrastructure Asset Class Definition Guidance makes for an interesting read. It is a clear and concise guide to identify if an entity is considered as Critical Infrastructure, whether it…
One was pleased to see that the U.S National Association of Corporate Directors (NACD) published their ‘Directors Handbook on Cyber-Risk Oversight’ last week. Recognizing the need for corporate boards to adopt a 3 Line of Defence (LoD) Model for the…
Cybersecurity risk management is rapidly becoming a regulated risk. With U.S, EU and APAC regulators moving quickly to transfer the accountability and responsibility for cybersecurity risk management into board rooms. What differentiates todays cyber regulatory proposals is the requirement for…
