The cyber and D&O insurance industry faces an interesting challenge Gerry Kennedy as 99% of organisations fall within the category of SMB/ SME if the statistics are correct. Yet the insurance industry is struggling to accurately assess SMB risk aggregation…
Herein lies a problem for security. The cyber debate has long been one of demonstrating tangible returns, be that for investors or CFOs in security tech or CFOs and investors in those companies that have to invest to demonstrate adequate…
Boards need to focus on more than vulnerabilities. Boards are being regulated to demonstrate governance, oversight and assurance over cybersecurity risk management. That requires a broad understanding of cybersecurity and risk management practices. The GIGI paper raise several points of…
An interesting case of the sensitive U.S military data that may have been leaked to China, Russia, Iran and other nations. The U.S State Department has concluded a $200 million settlement with defense contractor RTC, formally Raytheon Technologies over charges…
A date for the diary. As Crowdstrike is called to testify on the 24th of September to a U.S. House of Representatives subcommittee, on the July IT outage. The U.S. House of Representatives Homeland Security Committee sent a letter to…
Malaysia’s cyber law comes into effect this week, establishing a broad compliance framework that pulls together the National Cybersecurity Security Committee, Chief Executive of the National Cyber Security Agency, National Critical Information Infrastructure (NCII) entities and cybersecurity providers. The law…
If the figures are remotely correct Olaf Classen, irrespective of the amount being in ‘wooden’ euros. Imagine what that the time, effort and money could have been used for? So many other worthy causes. @Thaddeus Dziekanowski Veritas GRC #cybersecurity #cyberriskmanagement…
They say what goes around comes around, unfortunately for cybersecurity and cybersecurity risk management this is true. The book for cyber was written 10s of years ago and the paintings were put on the digital wall. People way brighter than…
A nice little earner as the SEC charges 26 broker-dealers, investment advisers, and dually-registered broker-dealers and investment advisers for widespread and longstanding failures by the firms and their personnel to maintain and preserve electronic communications. It’s an investigation that been…
……..and it’s going to get worse. Poor board governance; an ill equipped security workforce facing increased oversight and assurance of cyber risk, and broad cyber regulation in the U.S and EU. Are we being fair to cyber professionals, expecting them…
