The SEC announces cyber related actions against eight firms for failures in their cybersecurity policies and procedures. That resulted in email account takeovers, exposing the personal information of customers and clients between 2017 and 2021. In my view what is…
The regulatory environment in the US is developing quickly. 2 SCRM and cyber Executive Orders have been signed in 2021, setting requirements for fact finding and cybersecurity regulation. Cybersecurity is a significant component of the draft 2022 NDAA and a…
A fascinating and informative read, which goes someway to explain why major change programs within companies are not always as effective as many may think, in my case cybersecurity. What is going to be the impact of increased cyber regulatory…
A good read from Bloomberg. Small business is the achilles heel of any strategic cybersecurity program, whether it is run in the US, Europe or Asia. This is not a negative comment it is a fact, the math says it…
Beijing is cracking down on business, tightening regulation on everything from technology companies to insurance providers. With the Standing Committee of the National People’s Congress passing data protection and privacy laws as recently as Friday. The regulatory drive by China…
Well worth reading, the August 2021 Federal cybersecurity report to the Senate Committee on Homeland Security and Government Affairs. Highlighting the current issues with cybersecurity across 8 Federal Departments. covering DHS, State, Transportation, Housing, Agriculture, Health, Education and Administration. The…
The US State Department has reported it has been hacked at some point in the past few weeks. Coming at a time when they are working to evacuate US Nationals and Dependents from Afghanistan. The hack also comes at the…
As the West pulls out of Afganistan, will the hacking community be emboldened by what they may see as a lack of international resolve? New techniques applied to a well developed solution. The West has found it difficult to create…
This is an important notice for publicly traded companies and cyber professionals. Under the Securities and Exchange Act 1934 The Securities and Exchange Commission (SEC) charged Pearson a the UK based public company, with making misleading statements and omissions to…
Nation state cyber is of increasing concern with the recent Kaseya, Microsoft Exchange and SolarWinds hacks. Federal government has increased state, local and tribal government funding for cyber infrastructure. With $1.9 billion proposed to go towards updating or replacing hardware…
