Well worth a read. Cybersecurity is a national and international problem, requiring international collaboration. Harmonization of cybersecurity risk management regulation, strategy, governance, education and standards. All of which are important if we are to securely manage global trade, national and…
A survey report by the UK government on the status of cybersecurity of UK industry, as part of its continual oversight of the status of cybersecurity risk management. Statistics of cybersecurity compliance always make for an interesting read as they…
Are companies adopting a conservative approach to cybersecurity risk management reporting. Or are they taking a safer line with 8K filings for the time being. As the regulator has not yet clearly responded to the information that it has been…
One suspects that we are heading towards more sticks than carrots Rachel V. Rose, JD, MBA, if the recent spate of cyberattacks and their effects on U.S national healthcare systems are an indicator. The problem for both regulators and the…
A great article and a good question from the WSJ and MIT. With reported U.S data breaches up 78% in 2023 from 2022 and up 72% from 2021 yet spending on cyber spend is at an estimated $188 billion globally…
Rachel V. Rose, JD, MBA thank you for sharing. A bit like buses, coming at the same time. This week the EU adopted the text for the EU Cyber Resilience Act (CRA) (), setting out the cybersecurity risk management requirements…
Audit, the third Line of Defense, are a critical function in the oversight, assurance and attestation of cybersecurity risk management. Audit provides independent assurance of compliance to cyber regulation such as the SEC Final Rule, EU NIS 2 or DORA.…
Thank you for posting Olaf Classen. The cyber attack on Varta and its effect on access to capital markets is a consequence of cyber security risk management. Unlike its compatriots in the U.S Varta maybe fortunate as cyber attacks that…
One of the biggest problems with cybersecurity risk management governance and remediation, is boards themselves. They do not have the knowledge, skills and experience required to manage, oversight, assure and attest cyber risk. Knowledge Skills and Experience regulations such as…
When you burry your head in the sand there’s one thing that hackers will take great delight in exposing and its not how much money you can afford to pay. If hackers can encrypt your data, they can do so…
