The regulatory worm is starting to turn for cyber security. Yes we have had GDPR for over 2 years and have CCPA, HIPPA and CMMC. But the fundamentals for cyber security do not change. By its very nature cyber is…
Be careful where you lock your tools. As hackers are able to remotely lock a male chasrity belt, with painful consequences and an embarrassing trip to A&E. View Original Post
The US election is the most anticipated and important election of 2020 and the most important election geopolitical speaking, other than that for the Chinese leadership. Which by all intents and purposes isn’t an election open to the general public.…
Damned if you do, damned if you don’t. Imagine that you have been ransomwared, all your business data is locked down and you don’t have the keys. You may have the option to pay the hackers who have kindly locked…
Thanks for sharing John Weiler CMMC-CoE, TBM, Agile Acquisition. It is very useful for those of us outside of the US to be able to see what is happening in its legislative space. As cyber legislation develops globally, predominantly in…
You don’t have to work for the company to whistle blow, as $1.8Mn is awarded by the SEC to a company outsider following a successful regulatory action. It strengthens the point that breaches in regulation can be identified and reported…
Skunk works on Steroids: This is one to watch if you are in cyber, procurement and manufacturing. As the US DoD has taken a new approach to the design, development and testing of its defence systems. In this case, it…
I have made several comments on the SEC whistleblower programme over the past months. The SEC has moved further to strength the programme, one which it sees as an important tool in the governance and oversight of its covered entities.…
Thanks for sharing this Kris Carter, it is interesting that the review request for the 17.09 release was an emergency one. Maybe adding a little speed to its release? With clarity around its release, putting pressure on the DoD supply…
For those of us in the security profession there is plenty of cross over between cyber security control frameworks, be that ISO or NIST and other regulatory requirements. SoX has from its inception focused on Access to Programmes and Data…
