S&P have priced in the impact of the Optus cyber attack. Credit spreads rose from 1.5 to 1.72 on 2028 Australian dollar bonds. Indicating that the risk of remediation, the impact of cyber legislation and costs of addressing the longer…
Global Defense contractors have been a target for years, it’s the reason the DoD updated DFARS regulations back in 2017 following several GAO audits. But more recently NATO hacks and the public disclosure by MBDA highlight the growing problem. A…
Say it how it is, there’s a lot to be said about harmonisation of cybersecurity regulation internationally, with concerns that Australia’s cyber laws do not go far enough to address CNI, highlighted by the Optus incident. At a time when…
Hackers targeting the military across South American countries including Mexico, El Salvador, Colombia, Chile and Peru release sensitive documents. With more to release that may turn out to be embarrassing for their governments. ‘The leak of data stolen from the…
One wonders if the size and scale of the operations that China has been exerting on the West to acquire IP, are now starting to be understood by Western security services? The West develops significant amounts of IP that make…
Audit reports are not always the most riveting of reads, but I have to say this report is. Not because it’s about U.S Nuclear Cyber compliance but because it starts with OMB A130 and FISMA as the foundation for U.S…
We cannot underestimate the importance of the appointment of the secretary-general of the International Telecommunication Union (ITU)s in determining the future of the internet, a vote that will take place next week. The ITU develops worldwide technical standards for the…
The challenge for companies is that cybersecurity products do not a secure business make. The cyber regulatory landscape is getting tougher, cyber insurance is struggling to fill the inherent – residual cyber risk gap, and expectations are that organisations will…
Thank you IFACI for the opportunity to discuss cybersecurity risk management, the impact of international cyber regulations, and the role of Internal Audit as the 3rd Line of Defence. Many disagree with the ‘stick’ approach of regulation to address corporate…
Cyberattacks may not be the new norm for everyone, but the once low probability attacks that used to affect websites through DDoS or poor configuration and patch have been replaced by extreme loss, higher probability, high severity threats. We have…
