We need more popcorn, as the SEC vs. SolarWinds case continues. The SEC responded on the 24th May to Judge Hon. Paul A. Engelmayer, in response to the latest SolarWinds challenge. Disputing that it neither distorted facts nor intentionally omitted…
If CISOs want to survive we have to change the cybersecurity message. Having a nimble response to cybersecurity issues as they arise, is not going to address the cybersecurity problem that organisations face. Cybersecurity risk management regulation is doing that.…
We have a crisis in cybersecurity knowledge, skills and experience; we have an environment in which security professionals cannot work; and we’re introducing cyber regulation that is going to increase workload, require new competencies from the board room to the…
A great read, EUs assessment of its cybersecurity skills gap, including the gaps in awareness, education and recruitment. () The EU is not alone. All nations have the same challenge with the Cybersecurity skills gap, and its not just a…
Material, Reasonable, adequate are the core tenets of the SEC final cyber rule (). It’s a challenges that boards face and must reach a conclusion on, not just for incident reporting. But to demonstrate they are managing material cyber risks…
The UK National Cyber Security Center has released a ‘Code of practice for software vendors’, and the need to raise cyber resilience of software. The code emphasizes the need to implement Secure design and development, securing the build environment, secure…
Allan Alford, I like the taste of realism. The CISO is the the only role that wants to sit at the board table, but has no professional standing to site along side there peers. A role that lawyers and regulators…
An interesting read published by Deloitte Center for Board effectiveness and Center for Audit Quality in March 2024. Evaluating the priorities for audit committees and the challenges, opportunities and improvements in audit committee effectiveness. Cybersecurity regulation across the U.S and…
This event will be great. Please come and listen to @Thaddeus Dziekanowski and Brian D. McCarthy discuss the SEC Cyber Rule and how the Certified Information Security Manager (CISM) certificate program can support those involved in supporting organisations meet their…
Data is more valuable than gold and oil. It’s one commodity you cannot put a price on. View Original Post
