Conspiracy theory or a concerted effort to undermine U.S bond auction? As traders make the link between weaker than expect results that had ‘at least something to do with the ransomware attack on the American Arm of ICBC bank’. ‘The…
Another law firm suffers a data breach. Allen and Overy the ‘magic circle’ law firm has suffered a cyber attack this week. It is not the first big firm to suffer a cyber attack and data breach claimed by LockBit.…
The long awaited outcome of CMMC is reaching its climatic conclusion. One hopes the rule addresses 1. The requirements for international DIB compliance. 2. The expectations for oversight of the International DIB. 3. The penalties for non-compliance. 4. Alignment to…
We are heading into a difficult place with cybersecurity funding, at a time when we require cybersecurity risk management skills and resources. We have seen some notable exits for the cybersecurity market recently (), reductions in headcount and the effects…
This is definitively a read from the Wall Street Journal (). We may have a case that raises the question of ‘Adequate’ cybersecurity risk management compliance, as SolarWinds comes out fighting over last weeks SEC charges against the company and…
ICBC bank may have been affected by a ransomware attack that has had a knock on effect on U.S Treasury markets. One cannot under estimate the potential effects of a disruption of treasury markets, the inter-connected ecosystem of financial markets.…
A further demonstration of the effects of an nationwide outage of Critical National Infrastructure, as Optus in Australia suffers a major systems failure. It is not know what caused the outage, but it is a significant issue for Optus. That…
A very good question, why does cybersecurity pose a significant risk to the public and private sector given all the funding put into managing cybersecurity? As a 20 year cybersecurity and risk professional one believes it has a simple answer.…
Ted Dziekanowski this is a very real concern. While partner nations move ahead with cyber regulation the UK has made a decision not to this year. The SEC cyber rule, EU NIS 2, DORA, U.S and Canadian CMMC and Australian…
An interesting article on what CISOs should report about an incident. Here is my take, as someone who has been a counsel appointed cyber expert and witness and an executive that has led regulatory reporting of cyber incidents. The first…
