A positive message from the Australian Government, requesting companies patch critical vulnerabilities. Ahead of an announcement of new cybersecurity strategy. Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix #paravasecuritysolutions #cybersecurity #cyberriskmanagement View Original Post
Thank you for posting Olaf Classen, a useful list of cybersecurity standards. The challenge for regulated entities is that these frameworks will not enable you to comply with U.S or EU cyber risk management regulations. EU NIS 2, DORA and…
Self attestation has never worked for cybersecurity risk management. The U.S DoD regulated cyber through DFARS self attestation under DFARS 252.204-7012, it led to failures in national security through IP theft. Capital market regulators have been raising concerns over cyber…
The UK government has Royal assent for a new Procurement Act to support small business. With an aim of protecting national security. One hopes that it includes rules to ensure cybersecurity is addressed by small business delivering in to government…
One cannot over emphasis the importance of internal audit(IA) in cybersecurity oversight, assurance and attestation. That will be required by covered regulated entities and their boards. The role of IA across ESG is magnified when one considers the effects of…
A nice update on APT 28 and its focus on French critical infrastructure. Paddington bear got a face lift, tell me that this doesn’t look like Paddington having a bad (or good) day. Switching out the marmalade sandwiches for something…
Thank you Oliver F. Gosemann for pointing me towards the Heidrick & Struggles 2023 Board Monitor report. It provides an interesting perspective of board member cyber experience across several countries in the EU, Africa, North America, South America, Asia pacific…
The Dear CEO letter from Financial Conduct Authority in September 2023 to cyber insurers focusing on policy wordings, highlights the challenges insurers having in delivering cyber insurance policies and their own knowledge of cyber risk in the board room. How…
A reminder of why the SEC exists from the Chain Garry Gensler – “Partners of Honest Business and Prosecutors of Dishonestyâ€: Remarks Before the 2023 Securities Enforcement Forum ‘Nothing motivates individuals and firms quite like accountability.’ Accountability starts with a…
A reminded of why the SEC exists from the Chain Garry Gensler – “Partners of Honest Business and Prosecutors of Dishonestyâ€: Remarks Before the 2023 Securities Enforcement Forum ‘Nothing motivates individuals and firms quite like accountability.’ Accountability starts with a…
