Well worth a read if you are a U.S healthcare provider covered by HHS. As HHS proposes updates to HIPAA.There are to many updates to discuss. Points of note are1. Conduct risk assessments.2. Develop, revise and publish the organisations asset…
We have seen several cyberinsurance market reports over the past month highlighting the challenges and opportunities ahead for insurers. This latest from Tokio Marine HCC (TMHCC) pulls some of those threads together.TMHCC highlights a softening cyber insurance market and premium…
Have nation state threat actors hit a nerve? Nation state threat actors have certainly identified gaps in U.S CNI cybersecurity, with the recent attacks on U.S telecoms providers.An interesting report on the number of cyber-espionage attacks on U.S infrastructure, albeit…
One is sure there’s a good reason for the House of Lords not progressing with changes to the UKs Data (Use and Access) Bill.“These amendments, in essence, perform one simple but critical task: to afford a legal defence for legitimate…
They seek him here they seek him there they can’t find that bldy ransomware group anywhere. Looks like they keep to a working week, Lockbit will start up on Monday 3rd February 2025, after they come back from their hols.You…
How regulation and political ‘intervention’ may effect the sale of an Israeli cyber-tech company to a U.S PE house. As U.S investment fund AE Investments aims to buys Paragon and Israeli cyber-tech company for $500 million. The the Israeli MoD…
One reason why cyber attacks are a problem for U.S states. Not enough money or resources to address the growing threat of cyber attacks on public services. A problem all nations face.One questions whether having a score of 5 or…
Well worth a read. For those not familiar with the UK Bank of England’s CBEST program, it’s run annually by UK security services and (In line with NIS 2) uses TLPT to test the cybersecurity of UK systemically important banks…
One wonders how the model addresses cyber risk quantification for DORA regulated insurers and reinsurers in the EU? Given cybers non-normal relationship to operational risk and its growing effect on the other risk Categories under Solvency II. As one reads…
The squirrels have gone rouge.No longer a case of watch your nuts.@Thaddeus DziekanowskiVeritas GRC View Original Post
