Cybersecurity and the role of the board. Congress, CISA, the Securities and Exchange Commission and Department of Defence have pushed cybersecurity risk management into the board room. The SEC proposals are akin to Sarbanes Oxley, coming at a time when…
The European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines at the end of 2021. At a time when the US Federal government is also progressing legislation through Congress to address cybersecurity governance,…
Cyber insurance prices are up, coverage down and loss ratios rising. Cyber is a difficult risk to manage and innovation, economic growth, cyberspace and technology are not on the side of the underwriter and the insured. In our paper we…
The cyber incident that affected Toyota in Japan last week has highlighted the challenges for Japan’s manufacturers and their supply chains. The first is the fragility of JIT supply chains to impacts in product processing and delivery, the second is…
An informative article on cyber insurance. The announcement in January 2022 that Merck was entitled to a summary judgement following the Not Petya cyber attack of 2017. Set a precedent for cyber insurance claims and the use of the act…
An unexpected fall-out from the Ukraine Russia war is the impact on services provided by Russian contractors to European banks, as highlighted by Deutsche Bank. As the bank braces itself for disruption due to its dependence on Russian IT resources.…
Have recent events between the Ukraine and Russia and the potential of cyber attacks spurred the Federal Communication Commission to evaluate the security of BGP routing () Ted Dziekanowski #theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cscrm‚Â #scrm‚Â #fisma‚Â #riskmanagementframework View Original Post
Cybersecurity and resilience of capital markets and companies that trade on them is a concern for the SEC, that has long planned to regulate cybersecurity. The SEC Chair Gary Gensler has not been shy in stating his beliefs that cybersecurity…
I’m proud to support the standards of security professionals, as a CSyP assessor. We set the standards for security professionals, recognised by CPNI. #csyp #theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cscrm‚Â #scrm‚Â #fisma‚Â #riskmanagementframework View Original Post
Thank you for posting Paolo Passeri. A great and simple example of the challenges we face with ransomware, it show the further commoditisation of ransomware attacks. Is the asking price an indication of ROI or complexity? Ted Dziekanowski Brian McCarthy…
