When the Office of Budget and Management wrote OMB A130 in 1985 the intention was to assign responsibility to the OMB Director to develop and maintain a comprehensive set of information resource management policies for use across Federal government. Later complimented by…
Rachel V. Rose, JD, MBA, as cybersecurity regulations drive cyber risk management compliance ‘left of bang’ the healthcare sector. Especially the boards of healthcare providers who will have to take more responsibility for the management of cyber security risks. Indicative…
We are starting to see criminal convictions being handed down to individuals for failing to managed cyber attacks. In this case the former CEO of a psychotherapy firm in Finland was handed a 3 month suspended prison sentence for failing…
Slowly but surely we are moving away from the FUD debate, that has driven cyber conversations for the past 10 years. Cybersecurity is national security, corporate security and societal security and without a combined legislative and regulatory framework to address…
A nice audio on the work the Australian government has put in place to improve Australia’s cyber posture, in a relatively short space of time. Recent cyber attacks against Australian infrastructure have likely moved the needle. Ted Dziekanowski #cybersecurity #cyberriskmanagement…
U.S DoD DFARS, specifically DFARS 7021 (CMMC) is moving slowly ahead to a conclusion. A conclusion that is likely to see the 2020 IFR (DFARS 252.204-7019 and 7020), and CMMC (DFARS 7021) progress to OMB. However, as the US Aerospace…
The automotive sector is an increasingly problematic sector for cybersecurity. Automotive provides a rich source of personal data, OT and CNI. As we transition to all electric and driverless transport we increase our dependence and the Automotive sector. In turn…
Thank you Hill Dickinson LLP and Jamie Foster for the invite to present. I am looking forward to discussing cybersecurity risk management, regulation, governance and the challenges that U.S and EU cyber regulation creates for the boards of covered entities.…
Several U.S States have made an understanding of cybersecurity part of Attorneys biennial learning requirement from July 1, 2023. Notably New York State – () It was a pleasure to present with Rachel V. Rose, JD, MBA module 1 of…
One would argue that cyber insurers are ‘dead in the water now’. There is only one way in which cyber insurers can underwrite cybersecurity and that’s with access to data, and its not historic claims a data. There have been…
