The Okta incident and the companies response earlier this year is a lesson in incident response. One that resulted in a fall in stock price, a public relations nightmare, communication errors to the markets and legal action that will be…
The insurance industry has a major part to play in setting the cyber agenda. Cyber insurers are in a very unique position, they have direct access to companies that manage cyber risk through the insurers products and services. Insurers set…
I am surprised. The role of leaders is to manage cyber risk, as they manage any risk to their business strategy, operations and balance sheet. I wonder what the future holds as cyber regulation and enforcement programs develop? Leaders confidence…
We are maybe no further forward in our ability to manage cyber risk than we were 3 years ago? The real changes have come from government legislators, regulatory enforcement and the insurance industry. Regulatory changes will drive corporate changes that…
Ted Dziekanowski, this is an interesting read. The case bought by the Australian Securities and Investments Commission (ASIC) adds precedence in Australia for cyber security and risk management practices, of AFSL licence holders. The Key takeaways identified in the article…
We live in difficult times. Food price inflation driven by increases in the price of raw materials such as flour, oil and gas are making life difficult for millions of people. We know from past experience that hackers aim for…
Well worth a read. The EU council announced on the 11th of May 2022 that it had reached an agreement for its Digital Operational Resilience Act (DORA), that will impact EU FIs and require the oversight and assurance of ICT…
Last night the UK Attorney General Set out the UKs position on cybersecurity, international law and the need for a clear framework for cybersecurity, that make clear when state action is unlawful. Treating a cyber-attack the same as a physical…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
Regulatory compliance in the U.S. especially in the areas of Sanctions, Cyber and Crypto is creating a compliance headache both for Federal agencies and their intended recipients. While Sanctions are not new, the convergence of AML, ESG, Cybersecurity and Crypto…
