The impact of EU NIS 2 will be broad and deep for EU CNI providers, and not just those that are within the Maritime sector. EU NIS 2.0 like other cyber regulation shifts cybersecurity ‘left of bang’ and onto the…
I presented the topic of defense cyber at DSEI Japan last week, and would suggest that the cybersecurity of defense data is much bigger than Australia in the case of the AUKUS deal. The U.S is focused on the protection…
Could the recent release of the White House ONCD cyber strategy have started the cyber ball rolling and provided the umbrella to drive forward other regulations? (). The Homeland Security and Governmental Affairs Committee met to discuss cyber threats facing…
Cyber has always been an enterprise wide business risk, and developments in cyber regulation in the U.S, EU and Australia will create legal and compliance risks for boards and CISOs. Pushing Cyber into the board room and requiring a closer…
Is there a view on the validity of cyber insurance in the event of a regulatory breach? With the volume of cyber regulation being developed globally, that appears to affect many industry sectors. Many organizations may be covered by cyber…
The recent release by the White House of the National Cybersecurity Strategy, the Securities and Exchange Commissions (SEC) proposals for cybersecurity risk management and EU’s cyber regulation sets out the direction of travel for corporate cybersecurity risk management. By way…
One wonders how this squares with the EU, U.S and Australia introducing broad reaching cybersecurity regulation under EU NIS 2.0, DORA, The ONCD National Cybersecurity Strategy, Australian cybersecurity laws and DoD DFARS program? GDPR affects only one data class, PII.…
This is an important read. The U.S Department of Justice (DoJ) recently released the enclosed evaluation of Corporate Governance Programs. The DoJ Evaluation of Corporate Governance Programs update aims to provide further guidance that prosecutors should consider in conducting an…
A nice article from the WSJ on the cyber regulation from the 1st March that U.S, EU and APC boards should be concerned about. There are a few additional regulations that also need to be considered including the Bidden Harris…
The EU has made significant efforts to regulate cybersecurity. Its approach has been to create a connected suite of regulations that compliment each other. Yet can be applied independently across industry sectors for example EU NIS references the CRA and…
