An excellent and thorough article Rachel V. Rose, JD, MBA. The SEC final ruling sets out a range of regulatory requirements for covered corporate oversight and assurance of material cyber risk and material incident disclosure. That effects both domestic and…
A vast majority of UK organizations do not use Cyber Essentials. At a time when UK partner nations are regulating cybersecurity, by example the recent confirmation by the SEC, finalizing cybersecurity risk management of public firms, that includes Foreign issuers,…
Thank you for posting Ted Dziekanowski. This ruling is not about incident management, that accounts for less than 10% or what the SEC seeks to achieve. The SEC final ruling is broader in its scope and application than the original…
Spare a thought for entities covered by the Australian Prudential Regulator, following the announcement by the SEC to regulate cyber. The APRA will expect boards of covered entities to oversight cybersecurity. 1. APRA says boards are ultimately accountable for operational…
With the U.S ONCD, EU, Australia and Federal Agencies incuding the SEC, TSA, DoD and FTC amongst others, all moving forward with cyber regulation. Harmonisation and reciprocity is important. U.S and EU market and industry regulators have chosen in general…
Thank you Rachel V. Rose, JD, MBA. With the U.S and EU both moving forward with proposals requiring the manufacturers of ICT products and services to validate their cybersecurity, before they can be sold or distributed in their respective jurisdictions.…
One wonders given Chinas ability to be able to bring the resources to bare to address a problem. The chances, if any, the West has in building the necessary capacity and capabilities to address cybersecurity, if China changes gear on…
Australia Prudential Regulatory Authority (ARPA) has moved to strengthen board oversight and assurance of cybersecurity, by updating CPS 230 ‘Operational Risk Management’ standards. Proposing requirements for more robust oversight of cybersecurity risks by boards of covered banks, insurers and superannuation…
The U.S Office of National Cyber Directorate (ONCD) issued it’s national Cyber Strategy back in March 2023, it is now followed up with an outline implementation plan. This is a comprehensive and important document, that should be read by security…
The report for the Australian Governments Joint Committee of Public Accounts and Audit, highlights some challenges with cybersecurity compliance under the Governments Protective Security Policy Framework (PSPF). It sets out Australian governments protective security policy and supports entities achieve outcomes…
