Canada has passed its latest cybersecurity Bill, Bill C-8, through its House of Commons and Senate. The Bill now moves forward to Royal Assent. The Bill is in 2 parts. Part 1 amends the Telecommunications Act to add the promotion…
It’s the same old story for cybersecurity, in this instance the EU Cyber Resilience Act (CRA). The story is one of compliance. More accurately the gap between regulatory knowledge and compliance practice is not closing. The story is the same…
Thank you for posting Rachel V. Rose, JD, MBA, a timely demonstration that US Federal Government, in this case, the Department of Health and Human Services, takes cybersecurity risk management seriously. With HHS reaching settlements across several HIPAA enforcement actions.…
This is an important update from the French cyber regulator ANSSI, ahead of the French government ratifying the EU NIS2 Directive. Whilst in draft, it provides an outline of the French cyber standards. ANSSI has aligned French cyber standards against…
US Defence contractors are moving onshore as tariffs, regulations, and made in America is driving the onshore decision. One wonders what happens as CMMC starts to bite into the Global DIB. Small contractors are reporting that they are finding it…
One wonders the impact of the EU introducing cybersecurity regulations that lock UK industry out of CNI supply chains unless they comply with NIS2; or our ICT vendors if they do not comply with DORA; or our technology vendors that…
The UK has adopted the unfortunate position of not aligning its thinking on cybersecurity regulation with the rest of the world. The Cybersecurity Resilience Bill comprises many words with little substance. The political soundbite of the UK being a centre…
2025 has been a year of regulatory change for cybersecurity. CMMC was finalized, and FEDRamp has been updated. EU NIS 2 continues to drive ahead, with member states transposing the regulation into local laws and starting the process of meeting…
It is very positive to see techUK hosting its first quarterly meeting of the Commercial Directors forum to discuss its digital manifesto. The United States Department of War is regulating cybersecurity across UK defense procurement through DFARS, and now regulating…
An article from the insurance industry on the insurability of cyber risk, more importantly, its un-insurability. Cyber insurance is an important component of corporate risk transfer. Waiting for a catastrophic loss is likely not the right approach to take; recent…
