An interesting report on the impact of cyber, and ransomware payments for the re-insurance industry. I would argue that the insurance industry has the opportunity and a necessity to play a pivotal role in cybersecurity risk management. To benefit both…
Thanks for sharing Ted Dziekanowski. It helps shed some light on the increased oversight and enforcement by the SEC on covered entities. It is of no surprise that I am interested in the approach that the SEC may take on…
A nice update from the World Economic Forum (WEF), following up on their approach to cyber risk resilience. Aligning with the regulatory approach proposed by U.S. and EU regulators for Cybersecurity Risk management. Regulations that set the requirements for Board…
Thank you for posting Jerry Leishman. It is a significant fine and will be impossible to pay, but sends a clear message that such failures will be progressed in court. For me a take away is that the board, new…
The fall of crypto has had a knock on impact as exchanges lay off staff and cut back their operations. At a time when global regulators such as the SEC are starting to examine how crypto and exchanges should be…
A great read outlining cybersecurity litigation from recent cases, relating to U.S Federal contracts and contractors. Many will be aware of the Aerojet Rocketdyne and CHS cases, and Whistleblower actions. What is interesting is the increasing Bid Protest cases that…
The World Economic Forum recently released a cyber resilience white paper, that helps bring together the requirements from several U.S and EU cybersecurity risk management regulations and regulatory proposals. It establish a framework and process for creating cybersecurity resilience. Figure…
A good overview of cybersecurity and UK financial services regulation and compliance. In a balanced assessment of the challenges ahead as cybersecurity, risk management and resilience regulatory regimes converge. Regulatory regimes developed in the U.S, EU and UK plan to…
The UK Information Commissionaire Office (ICO) and National Cybersecurity Center (NCSC) have issued a joint statement and advice to the UK Law society with about on paying ransomware. Lawyers should not advise clients to pay ransomware demands should they fall…
Along with existing and proposed cybersecurity regulations comes the requirement to ensure that staff are trained appropriately. That ranges from the shop floor to the board room. A requirement of the SECs cybersecurity risk management proposal is for boards to…
