The thing about cybersecurity risk management is that you are never surprised, this is no exception. Not by the statement that Asset Management is included in corporate cyber risk assessment, but that it’s a consideration. You cannot manage cyber risk…
UK audit firm Crowe UK LLP, its CEO Nigel Bostock and seniors auditor Matthew Stallabrass has been charged by the SEC for the firm’s deficient audit of music streaming company Akazoo Limited. Crowe issued a clean audit of Akazoo 2018…
The SEC whistleblower program is a well tried and tested program. It has dealt out over $1Billion to whistleblowers, paying between 10% and 30% of the money collected. That is an indication of the total fines levied against those companies…
A very important read for CISOs, Board Directors and Officers. In February 2023 we wrote a paper with respected U.S Attorney Rachel V. Rose, JD, MBA and Educationalist Ted Dziekanowski entitled ‘U.S and EU cybersecurity regulation enforces cybersecurity risk management…
The Clock has started ticking for compliance to the Securities and Exchange Commissions ruling on Cybersecurity Risk Management Strategy, Governance, and Incident Disclosure. The effective date is the 5th September 2023. U.S Domestic and Foreign Private Issuers covered under the…
Thank you Stephanie Stacey, as with other UK firms, Capita’s cybersecurity challenges are unlikely to stop with the UK DPA. EU cyber regulation NIS 2 and DORA will come into effect in late 2024, requiring CNI providers and Financial Institutions…
It should be of no surprise that concerns are now being raise in Washington of the threat IoT devices, and OT technology for that matter pose to security. The recent investigation launched by the U.S Government against Rockwell Automation and…
It’s a very long game, and one does not think we’ve gotten to the end of the 1st quarter. Speaking in an open forum the director of the U.S Cybersecurity and Infrastructure Security Agency (CISA) Jen Easterly commented. “I hope…
The UK government has published the countries 2023 National Risk register. Giving the view of the major risks the UK faces, that includes cyber. Pages 15 and 16 are salient. With the growth of cyber attacks, the relational nature of…
Last week the U.S Department of Homeland Security issues its after-action report on the Lapsus$ hacking group. What does it mean for the state of our collective cybersecurity when a loosely affiliated hacker group, some of them teenagers, can compromise…
