SMEs or SMBs are in a very difficult place with cyber, as we write in our paper (). They are literally between a financial rock and a financial hard place, as are their prime contractors and governments (over 95% of…
Ted Dziekanowski Some good points raised in the article, many of which will be required to be addressed through U.S, EU and Australian planned cyber regulations. Cyber cases this year have put CISOs in a difficult position, facing criminal and…
Yesterday I published an article from the WSJ on the need for Western governments to harmonise cybersecurity regulation. This is why the U.S, EU and UK should be concerned about cybersecurity harmonisation. Since Australian’s suffered significant cyber attacks on Critical…
Australia set the standards for cybersecurity following NIST. The Australian Cyber Security Centre (ACSC)Â manages the standards on behalf of the Australian Government The manual details the cyber security framework that organisations can apply, using a risk management framework. The EU…
A great read, and to take 2 well used metaphors, ‘The horse has already left the stable’, and ‘We’re fighting the last war’. Ted Dziekanowski and I have written extensively about the need for international harmonisation across cyber. Incident reporting…
Lapsus$ the teen hackers that shone a spot light on some major brands in 2022 will be the focus of a Department of Homeland Security review. The lapsus group demonstrated that international script kiddies, a euphemism that belayed the severity…
This week I attended a presentation in London given by the Deputy Director of the NSA George Barnes and members of CISA. CNI cybersecurity is a subject that is of concern given our dependence on the energy grid and the…
The House of representatives have signed off on the $858Bn NDAA for 2023. There’s a significant focus on cyber, including the establishment of Bureau of Cyberspace and Digital Policy within the Department of State, to be headed by an Ambassador and…
A great report by the Harvard Law School Forum on Corporate Governance. Assessing the cybersecurity preparedness of the Russell 3000 companies, ahead of the expected release in Quarter 1 2023 of the SEC proposal on cybersecurity risk management governance, strategy…
The U.S DoD CMMC program has had a bumpy ride ahead of the proposed rule change next year and implementation of CMMC into the contracting process. A significant issue for CMMC and DFARS compliance has always been creating enough assessors…
