Reinforcing the earlier Lloyds post, the growing cyber threat from Nation State attackers is a concern. If it can be proven to be a nation state threat actors, cyber insurance maynot cover the costs, and it won’t cover the full…
Last week Ted Dziekanowski and I published a paper on Cybersecurity Risk Management, the Risk Management Framework (RMF) and the important role the Cybersecurity Framework (CSF) profile plays in risk mitigation. (). That we align within a TOM for cyber…
Cyber attack, complexity, frequency and severity is taking its toll on EMEA companies, especially Financial Services organizations. The commoditization of cyber-attacks across the region is a concern. With what appears to be a significant condensing of the ‘cyber kill chain’…
Capita, one of the UK Governments largest outsource providers is suffering an IT technical issue. Affecting internal systems and maybe linked to its Office 365 applications. Some of its public and private sector clients appear to have been affected. Capita’s…
Thank you Bryan Foss. The importance of risk based testing in the SDLC should not be underestimated. The U.S is moving to regulate the SDLC, requiring organization that provide products to Federal Agencies declare their software BoM. The EU and…
Ted Dziekanowski thank you for posting our article. Cyber regulation shifts cybersecurity risk management compliance ‘Left of Bang’ on to the financial statements, and into the board rooms of covered entities. EU NIS 2.0, DORA, the SEC proposal sets board…
A great article written earlier this month by James Dempsey discussing the impact of enforcement in cyber regulatory compliance. The breadth of cybersecurity regulation being released by U.S, EU and Australian regulators in 2022 and so far in 2023 is…
Are the geopolitical lines being drawn between the east and west for cyberspace? As the commoditization of data has created a rich pool of information that is being traded between partner nations, and cyberspace gains its foot hold as a…
U.S and EU Cybersecurity regulations set out requirements for covered organization’s to demonstrate their governance over and management of cybersecurity risks. Cybersecurity risks that change with changes in organizational strategy, operations and financial performance. Governance over cybersecurity risk is managed…
As cyber attacks become more frequent and their impact more severe. Is AI making the situation worst, it would appear the Europol thinks so. Before we create a rod for our own back and automate our way into more problems,…
