Does the UK have a defensive cyber strategy? The U.S Federal Government is starting to come to terms with the need to secure critical national infrastructure and regulating for it. The EU is adopting EU NIS 2.0 and the Australians…
Ted Dziekanowski Setting common criteria for nation states to agree and authorize common regulatory, cyber and risk standards. That everyone can agree upon and operate across national boundaries. Following a method that has already been created and adopted by several…
An interesting report on the state of the CISO market, primarily in the U.S. Stress and Burnout are still significant issues for CISOs. But changes are starting to take place as CISOs progress towards the board room, as regulation develops…
From earlier this year, Australia moves to implement its next round of cyber legislation. The enclosed article outlines some of the costs associated with the implementation and on going management of the associated risk management programs. ‘Home Affairs Secretary Mike…
Today the UK launched its Maritime security strategy. Cyber gets 53 mentions across the 116 pages. At a time when the EU has released NIS 2.0 that includes maritime as critical national infrastructure, the U.S. has passed cyber regulation to…
Over 90% of companies in most economies are made up by Small to Medium sized business. Companies that do not generate the revenues to be able to implement the range of cybersecurity protection and defenses required. By way of example…
An important read by Chris Inglis the White House National Cyber Director. As with Kinetic warfare highlighting the need to balance both ‘offensive’ and ‘defensive’ capabilities. Chris Inglis pointed out (sic) The only reasonable solution is to get serious about…
A nice post. Cybersecurity is a complex problem, one that many governments and organisations have failed to address in a timely manner. The challenge is not solely the focus on the threat, its the erosion of corporate and social value…
FISMA has been around for 20 years and has been difficult for many Federal Agencies to adopt. Inspector general Audits are available that demonstrate the compliance of agencies by both Federal Inspector Generals and the GAO. In this case the…
The SEC proposal for cybersecurity risk management, governance, strategy and incident disclosure is getting air time and column inches. What surprises me is the conversations about the timeliness of incident disclosure and content shared with investors, which is important. But…
