The Bank of International Settlements (BIS) is a financial institution owned by Central banks. It fosters international monetary and financial cooperation and serves as a bank for central banks. It drives the Basel accords and the regulatory capital requirements that…
The EU released the Cyber Resilience Act proposal on the 15th September 2022. The importance, complexity and significance of the Act cannot be underestimated, nor the penalties for non conformance. The proposed Act requires cybersecurity to be an integral part…
This week has been challenging for Uber. Reporting a cyber incident on Thursday following a compromise via its slack instance, coming on of this weeks court case and the testimony of a former Uber lawyer against Ubers former head of…
Being CISO is not the easiest of jobs, burn out is not new and will likely get worst before it gets better. The role is enterprise wide, as broad and as deep as an organisations data, the physical and logical…
U.S Federal government has had risk management in place for 20 years with FISMA, a risk based framework for the management of cybersecurity (information). FISMA unfortunately has had a patchy implementation with a poor record of compliance across Federal government.…
Is there a slow realization that companies will need to implement cybersecurity risk management practices if they want cyber insurance? Cyber legislation may come to the rescue of the insurance industry. Current cybersecurity risk management proposals and regulation looks to…
Several nations are moving to protect Critical National Infrastructure from cyber attack, through proposed legislation and regulations. The UK is developing regulations and a code of practice for Electronic Communications (Security Measures) and draft Telecommunications Security. To address the risk…
Working as the former European Head of Ops Risk and Cyber for a Japanese corporate bank I learnt allot about Japanese culture, passion, quality, vision and mission. The Japanese steadfast focus and dedication to the mission, meeting targets and working…
Great to support the The Institute of Internal Auditors Inc. this week. We had an important conversation about current internal IT control frameworks such as COBIT, the enterprise risk framework COSO and the developing cyber regulatory environment. A pleasure to…
Thank you Ted Dziekanowski for sharing. As regulators move forward with cyber risk regulations there will be a focus on the decisions made by security professionals and boards. The data that regulators are looking to be provided will give stakeholders…
