Expect a harsh regulatory response, big fines and maybe worst for senior management. Western nations have relied on the sanctions regime to affect change. Leaked documents involving about $2tn revealed transactions which show that some of the world’s biggest banks…
I’ve seen an increase in the number of Whistle-blower statements from the SEC recently. Is it a sign of the times and the current economic stress everyone is under, a failure to comply with financial regulation or an increase in…
The start of the new year for Universities could be bumpy if the NCSCs released warning comes true. The NCSC issued an alert warning education institutions to expect a rise in attacks. Newcastle and Northumbria were targeted this month and…
A great perspective on the changes being adopted in the US for supply chain risk and security. The balancing act which companies and government must content with if they are to apply appropriate cyber security controls. Whilst managing the costs…
Several representative bodies for academic and research institutions in the US have written to the Under Secretary of Defense for Acquisition and Sustainment (USD[A&S]). Raising concerns over the implementation of CMMC and its financial impact on academic institutions during COVID…
Cyber security is an important topic for discussion in 2021. The Senate and the House Armed Services Committee has set an agenda for discussion of CMMC in 2021. CMMC is one component of the drive in the US for Supply…
Cybersecurity Maturity Model Certification (CMMC). It won’t be long before the draft DFARS text for the CMMC programme is released for public consultation. Whilst no one knows what it will say, the MoU between the Department of Defence and the…
CMMC CoE and Parava sign MoU View Original Post
A very interesting read. I would say that there is a different culture to whistle blowing in the US than in most other countries. There is a tendency to reward whistleblowers out of the funds received from fines from successful…
A great article from HBR, highlighting what boards need to do in setting the cyber risk agenda. Building cyber governance, audit, risk assessment and the need to focus to outcomes such as the risk appetite, customer, shareholder and regulatory expectations.…
