Jamie Foster of Hill Dickinson LLP and I wrote this article to raise the awareness of U.S and EU cybersecurity regulation, that is moving rapidly to regulate cybersecurity risk management. In this instance regulation that affects Critical National Infrastructure (CNI)…
Yesterday the SEC released several cybersecurity risk management proposals focused on 1. Updates to regulation S-P. Requiring brokers, dealers, investment companies and registered investment advisers adopt written policies and procedures with administrative, technical, and physical safeguards to protect customer records…
A very important read from the U.S Securities and Exchange Commission proposing New Requirements to Address Cybersecurity Risks to the U.S. Securities Markets. Cybersecurity risk management proposals that will affect broker-dealers, clearing agencies, major security-based swap participants, the Municipal Securities…
The U.S administration demands that the Chinese owners of TiK Tok sell their share of the App or face a nation wide ban. The request came from the Committee on Foreign Investment in the United States (CFIUS), a committee comprising…
Cloud and cloud security is now the latest question lawmakers and policy advisors are grappling with in the U.S. But its not just the U.S that’s working to regulated cloud cybersecurity. The EU has also put forward regulation through the…
In 2022 we discussed the challenges that cyber insurance industry faces with insuring cyber to the insurance industry and Lloyds of London, in line with the statement made by the CEO of Zurich. We also presented the opportunities for the…
The Harvard Law School outlines the state of enforcement actions by the SEC over the past year. 2022 saw some cyber activity by the SEC enforcing cyber incident disclosures. However following recent events focused on crypto and VC financing 2022…
The enclosed is the update of the UKs integrated defense review for 2023. At a time when Western governments are developing cybersecurity risk management strategy, regulation and programs that integrate national Security between kinetic, logical, offensive and defensive security and…
Cyber insurance or self insurance has been the only realistic option available for SMEs to manage cyber risk. As the cost of cybersecurity compliance has invariably been out of reach for most small to medium sized organizations. With cyber insurance…
Cybersecurity risk management is not cybersecurity. Cybersecurity risk management requires organizations to adopt a cybersecurity risk management framework, cybersecurity practices and governance. To identify, evaluate and mitigate its cyber risks by adopting and managing appropriate controls. Enabling boards to present…
