One wonders given Chinas ability to be able to bring the resources to bare to address a problem. The chances, if any, the West has in building the necessary capacity and capabilities to address cybersecurity, if China changes gear on…
Australia Prudential Regulatory Authority (ARPA) has moved to strengthen board oversight and assurance of cybersecurity, by updating CPS 230 ‘Operational Risk Management’ standards. Proposing requirements for more robust oversight of cybersecurity risks by boards of covered banks, insurers and superannuation…
One cannot underestimate the degree of change that has been proposed by the U.S Executive Office through the March release of its ONCD cyber strategy and the subsequent implementation plan (July 2023) Ted Dziekanowski. The implementation plan pulls together many…
The hack on Australian law firm HWL Ebsworth highlights the challenges both firms and their clints face with data theft. Law firms hold the most sensitive personal information of their clients, be that personal or corporate data. Data that is…
One suspects the outcome of the Wells notices from the Securities and Exchange Commission (SEC) against SolarWinds, will decide the next course of action for civil action against the company. The SEC will be examining the cybersecurity posture of SolarWinds…
I’m looking forward to presenting our 3rd of 4 sessions on cybersecurity risk management tomorrow with Rachel V. Rose, JD, MBA. Where we look at the current, proposed and pending cybersecurity risk management regulations from the U.S and EU. Including…
On the 15th of June Rachel V. Rose, JD, MBA and I will give our third cybersecurity risk management module to U.S attorneys. As part of our series with Thompson Reuters, West LegalEdCenter. In module 3 we dive into the…
This is a great read. A research paper that discusses the role of cyber insurers and attorneys in the incident response process. Written by 4 respected cyber academics, Daniel Woods, Josephine Wolff, Daniel Schwarcz and Rainer Bohme. Now accepting that…
It can be expensive being an MSP, especially if you are delivering cyber services. Practicefirst Medical Management Solutions and PBS Medcode will pay the state of New York $550,000 for failing to deliver systems patches in a timely manner. Patches…
Cybersecurity risk management is rapidly becoming a regulated risk. With U.S, EU and APAC regulators moving quickly to transfer the accountability and responsibility for cybersecurity risk management into board rooms. What differentiates todays cyber regulatory proposals is the requirement for…
