Thanks for sharing Ted Dziekanowski, a useful summary of the status of ‘Environment’ reporting under ESG and the Securities and Exchange Act. But note the myths and importantly the cyber security disclosure statement. SEC Chairman Gary Gensler indicated recently that…
I posted many times about cybersecurity, regulation, oversight and assurance and the general failure of business to adopt appropriate cybersecurity practices. If the enclosed article is correct then ‘seller beware’. Giving the PCAOB and CFPB more authority may be a…
Does the cyber insurance market need a facelift? Has the rapid growth of the cyber insurance market, with little historical data to underwrite the risk, poor client awareness and risk reduction and a rapidly growing threat put the cyber insurance…
If you are a cyber security professionals then the enclosed speech from the Securities and Exchange Commission (SEC) is worth a read. Cyber is the biggest non-financial material risk on the corporate balance sheet, for capital markets, investors and importantly…
A great summary of President Biden’s recent EO to transform US Federal cybersecurity. #SupplyChainRiskManagement‚Â #DefenseIndustrialBase‚Â #DefenseProcurement‚Â #CyberRiskManagement‚Â #SupplyChainSecurity‚Â #DefenseIndustry‚Â #FederalAcquisition‚Â #FISMA‚Â #cybersecurity‚Â #riskmanagement‚Â #compliance‚Â #riskmanagementframework‚Â #SCRM View Original Post
With the acknowledgement that the TSA had a light touch approach to cyber oversight with pipeline companies. The recent report by the GAO on the role of the government on cyber security, the challenges which the cyber insurance industry faces…
Cybersecurity regulation over the pipeline industry is being proposed following the Colonial pipeline hack exposing the light touch for cyber regulation over the industry. The Transport Security Administration (TSA), a Department of Homeland Security (DHS) agency did have the resources…
The enclosed white paper summarises the Department of Defence Instruction (DoDI) 5000.90 Cybersecurity for Acquisition Decision Authorities and Program Managers.‚ Released by the DoD on the 30th December 2020 establishing cybersecurity risk management policy, procedures, oversight and assurance for Weapon…
The enclosed white paper summarises the Department of Defence Instruction (DoDI) 5000.90 ¢â‚¬Å“Cybersecurity for Acquisition Decision Authorities and Program Managers¢â‚¬Â.‚ Released by the DoD on the 30th December 2020 establishing cybersecurity risk management policy, procedures, oversight and assurance for Weapon…
Supply Chain Risk Management (SCRM) and cybersecurity management are Front and Center for the US Federal Government.‚ The DoD has been actively working to address deficiencies in the cybersecurity of its Defense Industry Base (DIB) using Defence Federal Acquisition Regulation Supplement…
