Does the UK have a defensive cyber strategy? The U.S Federal Government is starting to come to terms with the need to secure critical national infrastructure and regulating for it. The EU is adopting EU NIS 2.0 and the Australians…
The UK Financial Reporting Council, the body that regulates UK auditors, accounts and actuaries raises concerns that UK firms are not taking digital security seriously enough. ‘There was general consensus that current disclosures are not sufficient to meet investor and…
I’ve written several times about the GAO reports that formed the foundation for both U.S DoD DFARS and CMMC programs, and the implementation of cybersecurity. The GAO identified issues in DoD weapon system cyber security back in 2018, and is…
Ted Dziekanowski an eqeletic mix of comments to the SEC cybersecurity risk management proposal. Many focus on incident reporting and board ownership. Plenty for, plenty against. The response from the Bar Association is worth a read. One wonders which way…
I presented to The Institute of Internal Auditors Inc. in quarter 2 on the impact of Geopolitics and cyber. Cyber is a significant geopolitical risk, threat actors operate at nation state, criminal and in the grey space between the two.…
A very interesting report on the Insurance Linked Securities (ILS) opportunities for cybersecurity. I understand the need for the insurance industry to identify sources of capital to underwrite the risk and the opportunity for investors to develop Insurance Linked Securities…
The Aerospace industry is inextricably like to cybersecurity and risk management. It relies on both IT and OT in the form of booking, reservation and sales system, logistics, procurements, HR and third party supplier platforms. Complex airside systems in the…
A recent U.S. presidential order seeks stronger relationships with partner nations on cybersecurity law enforcement. Only by working together with key law enforcement and prosecutorial partners in the EU can we effectively combat the threat that ransomware poses to our…
Space Force seems to be moving quickly with its cybersecurity program? Rolling out cybersecurity requirements to commercial providers. The Space Force Infrastructure Asset Pre-Assessment (IA-Pre) program will require satcom providers to get on-site, third-party assessors to validate their compliance with…
There are signs that hackers are going public before their targets do. With the regulatory environment developing rapidly, requiring regulatory incident reporting in some cases within 4 days. Hackers publicizing that you have been breached and your data encrypted before…
