A small but meaningful fine of $1.5M by the SEC as it settle charges against GWFS Equities, Inc. (GWFS) for failure to file Suspicious Activity Report (SAR) following a recent cyber event. This enforcement action is the first of its…
SEC Commissionaire comments on the SEC Chairs regulatory agenda. Raising concerns that the current legislative and regulatory book of work is not as progressive as they would like. Cyber Risk Governance remains in the Fall 2021 calendar. Ted Dziekanowski Jason…
An article that is worth reading, an interview with Sir Jeremy Fleming, head of GCHQ by the FT on cyber, digital and digital currency. Is there recognition that the fast paced and dynamic nature of cyberspace requires global digital standards?…
With our dependency on digital and tech, chip manufacturing has to be the most important national capability. Is Europe’s lack of chip manufacturing capacity going to create a significant security risk in the not to distant future? With the US…
Could Gartner’s 2020 prediction that the impact of cyber-attacks on physical infrastructure through OT, with the loss of human life start be correct? As cyber legislation and corporate actions gains pace for example shareholder suits for failing to protect shareholder…
If you are going to read anything this week, read this. With amendments proposed to NDAA 2022 for FISMA 2021, FISMA is on the legislative and regulatory radar. There have been amendments made to FISMA 2014 by OMB, under Executive…
The US Government Accountability Office (GAO) has issued its assessment of the CMMC program, required under the 2021 NDAA. It’s a synopsis of the history and current state of the CMMC program, highlighting concerns raised by industry and the challenges…
The Department of Justice(DoJ) is moving ahead at pace with its civil fraud initiative against government contractors that fail to comply with cybersecurity requirements. That include information security standards and cyber incident reporting obligations (DFARS 7012) and supply chain procurement…
In October this year the Department of Justice (DoJ) announced that it was putting in place a Civil Fraud initiative to enforce the False Claims Act (FCA). With a focus on organisations that fail to comply with cybersecurity standards required…
The U.S. Department of Homeland Security, Transportation Security Administration‚Â (TSA) agency last week issued security directives that implement new cybersecurity requirements on the‚Â US passenger rail‚Â and‚Â high-risk freight rail‚Â sectors. Owners and operators are required to: 1. Designate a cybersecurity coordinator 2. Report to…
