Boards of U.S listed companies have to oversight, assure and attest material risks, irrespective of the SEC Final ruling on cyber for many years. Cyber has always been a material risk, tested to a lesser degree under SoX since 2002.…
With the U.S ONCD, EU, Australia and Federal Agencies incuding the SEC, TSA, DoD and FTC amongst others, all moving forward with cyber regulation. Harmonisation and reciprocity is important. U.S and EU market and industry regulators have chosen in general…
Thank you Ted Dziekanowski. Will they, won’t they, it will be so difficult to call. There are many influencing factors that will dictate if the SEC will regulate public corporate cyber. Political sentiment, the role of the SEC to protect…
Olaf Classen it’s difficult to describe this without asking questions. A tool owned by Google, used by security professionals, to evaluate files against 70 different antivirus solutions and check them for malware. Used by hackers to check if their code…
Ted Dziekanowski we have written many times of the role FISMA plays in U.S cybersecurity. Alongside OMB A-130 it forms the foundation of U.S cyber regulation. () FIMSA defines the framework for U.S Federal cyber compliance, that has in largely…
With the U.S Executive Office pushing ahead with cyber through the ONCD National Cyber strategy, the next phase of the program is critical. It’s delivery, delivery and delivery, and unfortunately U.S Federal Government has a poor track record in delivering…
With the release yesterday of the National Cyber Strategy Implementation Plan. Setting out the tools to enforce cyber regulatory compliance of product and service vendors, under Pillar 3. One wonders with all the levers and tools laid out for Federal…
The U.S Office of National Cyber Directorate (ONCD) issued it’s national Cyber Strategy back in March 2023, it is now followed up with an outline implementation plan. This is a comprehensive and important document, that should be read by security…
Brian Levine thank you for posting this. It is a really important post and any security professional should read this with great care and attention. As cyber regulation develops, cyber attacks increase in frequency, severity and complexity the decisions that…
Thank you Ted Dziekanowski. One is not convinced that cloud poses a special cyber risk for CNI. As you have said many times and demonstrated through your work as one of few Cloud Audit trainers globally. Cloud alongside all infrastructure…
