One would argue that cyber insurers are ‘dead in the water now’. There is only one way in which cyber insurers can underwrite cybersecurity and that’s with access to data, and its not historic claims a data. There have been…
That’s going to work well when U.S, EU and Australian cyber regulations come into force, and with legal precedence being set for failing to report data breaches. One suspects that you shouldn’t listen to the advice about data breach reporting.…
Thank you Stephen Pitt-Walker, JD, FGIA, board accountability for cybersecurity is becoming a front and center issue, and one not just for Australian companies. But one for boards of all covered regulated entities. Ones not convinced that Australia is behind…
Cyber regulators require a risk based approach be adopted for cybersecurity. A risk based approach requires a knowledge of the organisation, its strategy, business operations and financial planning. Cyber risk management and cybersecurity are not the same. Many organisations will…
£12.7mn fine for Tik Tok failing to protect the privacy of 1.3 million children. Should this not be a higher fine? View Original Post
On the 30th March 2023 the U.S Food and Drug Administration (FDA) issued guidance to ‘Ensure Cybersecurity of Medical Devices’. The Refuse to Accept Policy under section 524B of the FD&C Act was effective on the 29th March 2023 and…
As Lloyds cyber exclusion clauses for ‘state backed cyber attacks’ come into effect one suspects that it is going to face challenges. Firstly being able to attribute a hack to a named group, or individual with enough certainty to pass…
Last week Ted Dziekanowski and I published a paper on Cybersecurity Risk Management, the Risk Management Framework (RMF) and the important role the Cybersecurity Framework (CSF) profile plays in risk mitigation. (). That we align within a TOM for cyber…
U.S and EU Cybersecurity regulations set out requirements for covered organization’s to demonstrate their governance over and management of cybersecurity risks. Cybersecurity risks that change with changes in organizational strategy, operations and financial performance. Governance over cybersecurity risk is managed…
All sectors of the economy rely on manufacturing. Yet manufacturing is likely one of the least prepared sectors for the implementation of cybersecurity risk management and regulation. Manufacturers spend less on cyber, find it harder than most to secure funding…
