Olaf Classen, what happens when EU banks have to oversight and assure IT risks of ICT vendors. Who is accountable and accepts the risk? Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix #cybersecurity #cyberriskmanagement View Original…
The statistics from ENISA on cybersecurity investment does not paint a great picture over the adoption of NIS, as EU NIS 2 and DORA head down the road in 2024. It highlights what one could consider worrying trends in cybersecurity…
Ted Dziekanowski this is a timely and important document for Financial Institutions. The Financial Stability Institute (FSI) of the Bank of International Settlements (BIS), an international institution owned by member central banks. Has released a regulatory oversight framework for managing…
Australia is looking to move ahead with ‘Right of Bang’. Implementing an incident review board to capture lessons learnt and feed that back into the proactive action to address Australia’s cybersecurity. Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD,…
The recent cyber attack on the U.S business of ICBC bank has bought to light the considerable influence China has over U.S debt. China is one of the biggest funders and owners of U.S dept and ICBC bank is a…
An unfortunate consequence of a cyber attacks can be the departure of the CISO. As is the case with the recent Clorox Hack. One wonders the role that other members of the board played in the oversight and assurance of…
An interesting thought, what do you do then the hackers are threatening to tell the markets about your vulnerabilities. ‘Give us more money or we will squeal’ to everyone about the vulnerabilities we just exploited. Something they already threaten to…
Those consequential losses that cyber attacks create. Is this an example of the cyber loss gap. If delayed cargo costs, related to a cyber attack, are not covered by insurance. Who picks up the consequential lossess following an attack. The…
As discussed previously, those defense contractors effected by DFARS 7012 from December 2017 and effected by the SEC final cyber rule. (Including subcontractors). May consider the recent SEC charges against SolarWinds. The DoD required contractor to submit their NIST 171…
As we discussed when the SEC final rule was made public, covered entities will not be in control of all communications to the markets. Hacked companies could find that control over cyber incident communications that face the outside world, are…
