The CISO’s role is a difficult one, you cannot be everything to everyone. The C suite has a role to play and they need to be communicated to, take responsibility and accountability for security related risks. The CISO should support…
Never forget that your threat vectors could be as broad as the amount of data you share with others. Your IP could be at risk if your supply chain isn’t securing it as well as you think. View Original Post…
Will a balanced score card or flight deck be big enough to be able to visualize the breadth of Cyber risks. A good quality ISMS can include internal security risks relating to IT, Legal, HR, facilities risks external threat analytics…
Cloud apps? what about web services in general. In my experience companies do not always understand what data their we services are collecting. Its a good place to start, working from the perimeter in, to clean up the environment. View…
I would add that security professionals are key to the delivery on the GDPR. A good security framework is information based. View Original Post
Do companies understand what their digital services are doing when they are exposed to the internet. A good old fashioned pen test before they go live might help out. View Original Post
This EU legislation will help to harmonize information security co-operation and response across Europe. Which cannot be a bad thing. View Original Post
Will Cyber Insurance deliver what it says on the tin. Or is the pervasive impact of a cyber attack making cyber insurance a less attractive proposition for insurers? The nature of risk aggregation is a problem, not unique to cyber,…
Is Cyber stress testing on the way for Banks? The UK has its CBEST programme, can we see cyber risk management formally making its way into international banking legislation? View Original Post
Cyber risk management is everyone’s responsibility, not just first and second line. The very nature of our interconnected and often complex business models helps cyber attackers. Corporate’s offer them so many different opportunities to acquire data or to disrupt business…
