U.S and EU capital markets and regulators are rightly focused on ESG, as demand grows for socially conscious investment strategies. Highlighting the close relationship between capital and corporate social responsibility. One should also be concerned about the link between capital…
We are waiting for the DoD and U.S Federal Government to release DFARS 252.204-7021 formally and FAR part 32 and DFARS part 48. In response to the extended time line for CMMC the DoD has released the enclosed 2 page…
The UK governments cybersecurity center NCSC has refreshed its cybersecurity risk management framework. Including a risk methodology aligned with ISO 27005. Facilitating a more structured approach to cybersecurity risk assessment, quantification and management. Released at a time when global regulators…
Thank you for posting Ted Dziekanowski. CISOs should not be roiled with the action taken by the SEC against SolarWinds. The SEC has the obligation and regulatory duty to oversight and assure corporate management of material risk, and it has managed…
One suspects the outcome of the Wells notices from the Securities and Exchange Commission (SEC) against SolarWinds, will decide the next course of action for civil action against the company. The SEC will be examining the cybersecurity posture of SolarWinds…
One has to ask the question of Defensive cybersecurity maturity here in the UK. We see many nations moving ahead, addressing cybersecurity risk management through regulation. The UK government issued the enclosed report on the implementation of its Cyber Essential…
The Australian Prudential Regulator Authority (APRA) has informed Medibank that it will have to set aside an additional $250 million AUS in regulatory capital, to address issues following its 2022 cyber attack. As the regulator reviews the banks governance and…
Last week SolarWinds announced Wells notice’s have been issued to both the company, directors and officers, including the CFO and CISO. With CISA also indicating that the U.S. â¬Ëcan⬢t PSA our way out⬢ of cyber vulnerability and with EU member…
The UK NCSC, Bar Council and Law Society are warning the UKs 32,900 law firms they are a target for hackers and a target for nation state hacking groups. Law firms hold of sensitive client data, processing of large amounts…
A difficult time for UK emergency services, as a technical problem causes the system to fail for a number of UK counties. Demonstrating why resilience is important. Ted Dziekanowski View Original Post
