The UK Government has £880k (excluding VAT) to spend on proposals to help reduce cyber risk across defense. I have a proposal for the MoD to manage cyber risk. 1. Oversight and implement DFARS 252.204-7012. The DoD cybersecurity standard that…
With the SEC final cyber rule effective, what lens will be used to evaluate the SolarWinds cyber incident of 2021? The SEC final rule was not effective at the time, but the SEC has always required covered entities to oversight,…
Over the past 6 months we have seen several cybersecurity firms reduce headcount and re-evaluate their financial performance. At a time when the tech industry, PE and VC has been doing the same. But we are at a time when…
The SEC is not so much on a mission to tame America’s financial markets, it’s on a mission to protect investors, maintain fair, orderly, and efficient markets, and facilitate capital formation (its mission) One must not forget that U.S capital…
A whistleblower reported the Electoral Commission failed a cyber essentials audit, prior to its 2021 data breach. If the commission could not pass the most basic cybersecurity audit. What hope was there ever going to be they could withstand a…
This is a great paper, it captures the essence and impact on Directors and Officers Liability and insurance. ‘What is Next for the Risk of Cybersecurity-Related Litigation?’ The SEC final cyber rule effects corporate risk transfer, playing with the traditional…
A cyberattack on a UK defense contractor and the theft of sensitive physical security data is of concern. A cyber attack on the UK could be grounds to invoke NATO article 5, but who wants mutually assured destruction? Cyber attacks…
The cybersecurity industry and their clients are caught in a difficult place. Having to reduce operating costs in line with falling sales, at a time when the effect of cyber regulation is starting to kick in. Be that the SEC…
The long anticipated final cyber ruling for SEC covered registrants goes into effect tomorrow, the 5th of September 2023 with compliance reporting starting in December 2023, affecting U.S domestic and Foreign Private Issuers. The ruling transfers cyber risk into the…
It’s an interesting point that is made Ted Dziekanowski. The role of the CISO is an important one for many organizations, as the frequency, complexity and severity of impact of cyber attacks continues to rise. With cybersecurity increasingly being considered…
