Brian D. McCarthy, now and again there are presentations that are worth watching. This is one of them by the CEO of CrowdStrike, George Kurtz. It’s a well researched summary over the development of audit, risk management, governance and the…
Tom McLeodAfter a recent LinkedIn post on the impact of AI on Internal Audit I received a message to say that I was a techno optimist and that I was completely wrong about AI’s imminent impact on the profession we…
A test of resilience as Spain, Portugal and parts of France suffer a major power outage. Bringing big parts of the region to a grinding stop.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC#resilience #cybersecurity #cyberriskmanagement #cyberregulation View Original Post
It’s important when one considers cybersecurity risk to see a direction of travel toward regulation and compliance. It is true to say that you should not regulate for regulations sake, however when one considers cyber is a risk that most…
Thank you for posting Johnathan Rudy, very much appreciated. For those that thought the SEC SolarWinds case has gone away, along comes the enclosed filed document, that agrees the undisputed facts between the SEC and SolarWinds. As the case progresses,…
An interesting article on the US DoD CMMC program.While one can empathise with the level of effort required to comply with the DoD DFARs regulation. One is minded to remember that covered defense contractors have been required to comply with…
In todays business environment it’s very difficult to reduce complexity if you don’t understand data. Data is what make all organisations function, its the blood that flows through its processes and systems. Data and digital dependency is also what makes…
Cyber attacks are all more distressing when you have few methods of risk mitigation. Cyber insurance is a basic risk transfer and mitigation tool. In this case the Fall River School district may have to self fund a solution’The city’s…
The question the UK must raise is should cybersecurity ownership be held by the MoD, or a public body that focuses on the broader implications of cybersecurity across all the public and private sector?Cyber is a nation security issue and…
The Office of the Comptroller of Currency (OCC) has notified the US Congress of a major information security incident involving its email system. An incident that resulted in the unauthorised access to a significant under of email accounts. Office of…
