A comprehensive cybersecurity and telecommunications bill has been introduced to Canada Parliament this week, enacting the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national…
For those National and International DIB contractors this report is an interesting read. The DoD is undergoing its own assessment of cybersecurity compliance, for the oversight and assurance of Controlled Unclassified Information (CUI). Making progress in complying with FISMA (DoDi…
Well worth a read. The EU council announced on the 11th of May 2022 that it had reached an agreement for its Digital Operational Resilience Act (DORA), that will impact EU FIs and require the oversight and assurance of ICT…
Regulatory compliance in the U.S. especially in the areas of Sanctions, Cyber and Crypto is creating a compliance headache both for Federal agencies and their intended recipients. While Sanctions are not new, the convergence of AML, ESG, Cybersecurity and Crypto…
Know your enemy and know yourself to build an effective defence. Cyber threat modelling along-side vulnerability assessment and a clear managed enterprise wide architecture are important components to cybersecurity risk management. However this is the challenge. The Securities and Exchange…
An important read from Australia, as the Federal Court handed down its judgment in proceedings brought by the Australian Securities and Investments Commission (ASIC) against RI Advice Group Pty Ltd (RI Advice). Finding that there was a proper basis for…
A likely outcome of the SEC consolidating its crypto and cyber enforcement teams and increasing its size may well be a robust pipeline of work. One wonders Ted Dziekanowski if the combination of a robust well tested whistleblower program alongside…
Israel is looking at regulation requiring Communication companies to implement mandatory and unified cyber security, implement cybersecurity programs. The Communications Ministry and National Cyber Directorate, set out a list of requirements that includes installing monitoring and control systems, while making…
The SEC is growing its cybersecurity and crypto enforcement unit. One wonders if they are gearing up for closer oversight and assurance of both cyber and crypto. Adding 20 new positions to the Cyber Unit. With the two recent SEC…
From the 1st of May Federal Deposit Insurance Corporation (FDIC) supervised banks must report cyber incidents, to comply with new cyber incident report regulations (). Following their November 2021 Final Ruling. This in effect covers most banks in the US.…
