A great article, as the effects of EU cyber risk management regulation is felt by EU Firms. EU firms that are coming to terms with the economic effects of EU NIS 2, Cyber Resilience Act (CRA) and recently released EU…
The Senate Homeland Security and Governmental Affairs Committee has voted to approve the Cybersecurity Awareness Act that requires CISA to provide regular guidance and resources to the public and private sectors on best practices related to cybersecurity. The committee approved…
Thank you for posting Ted Dziekanowski. A timely reminder that NIST is developing industry specific cybersecurity framework profiles for cyber risk management. In this instance a CSF profile for LNG, demonstrating the application of the CSF and alignment with mission…
Thank you for posting Stephen Pitt-Walker, JD, FGIA. The Australian Critical Infrastructure Asset Class Definition Guidance makes for an interesting read. It is a clear and concise guide to identify if an entity is considered as Critical Infrastructure, whether it…
The DoD DFARS/ CMMC program is important for U.S defense security. One often talks about it alongside the EU NIS, DORA, the CRA, Australia’s cybersecuirty laws and the Securities and Exchange Commission cyber proposal. Yet it’s been around since 2017…
An interesting article on the recent Whistleblower award of $280 million by the SEC. Worth reading for security professionals and boards. When the legal profession focuses in, it’s a clear sign that there’s ‘gold in them there hills’, and in…
Thank you Olaf Classen, and they say that cyber regulation won’t have an impact, as the German Federal Office for Information Security (BSI) is likely to assume the role of a central office for cyber security, coordinating joint IT security…
A left of field post but one of interest on a Sunday, as the SEC charges a U.S investor advisory firm for its breach of fiduciary duty to its investors. Albeit a small fine, but an increasingly important message, when…
Cybersecurity is a challenge for Japanese organizations as cultural dynamics and a feeling of trust, rooted in ‘why would it happen to me’ prevail. Experiencing this first hand as the the head of cybersecurity and operational risk for a Japanese…
The Uber CSO case has come to a conclusion with the ex-CSO receiving 3 years probation and a $50,000 fine. It brings to an end what is a distressing time for Mr. Sullivan, a clear problem for Uber, and precedence…
