As always Paolo Passeri knowledge in cyber incidents is without question. Highlighting that nation state actors pivot their attacks to suit, weaponizing cloud services to increase attack agility. the mitigation of cloud-native threats can’t only be delegated to the CSPs.…
Law firms hold some of the most sensitive data. The enclosed is a nice article that highlights some of the hygiene factors law firms should consider in managing cybersecurity and the use of cyber insurance. The legalities of the oversight,…
A further example of the challenges CISOs face as a former Uber lawyer testifies in court against Ubers former head of security. The case evolves around Ubers 2016 data breach and allegations that the company tried to cover up the…
The global reliance on shipping cannot be underestimated, 90% of the carriage of world trade is due to shipping. There has been a dramatic reduction in physical losses, but all four of the largest shipping companies Maersk, Cosco, MSC (and…
Being CISO is not the easiest of jobs, burn out is not new and will likely get worst before it gets better. The role is enterprise wide, as broad and as deep as an organisations data, the physical and logical…
John Mackenzie AARPI GRCP M.ISRM NIT.SIG MAISA training is always used as the way to solve the problem, it’s not unique to Australia. But cyber requires more than training, it requires recognition by Industry that cyber is a problem and…
U.S Federal government has had risk management in place for 20 years with FISMA, a risk based framework for the management of cybersecurity (information). FISMA unfortunately has had a patchy implementation with a poor record of compliance across Federal government.…
Is there a slow realization that companies will need to implement cybersecurity risk management practices if they want cyber insurance? Cyber legislation may come to the rescue of the insurance industry. Current cybersecurity risk management proposals and regulation looks to…
Several nations are moving to protect Critical National Infrastructure from cyber attack, through proposed legislation and regulations. The UK is developing regulations and a code of practice for Electronic Communications (Security Measures) and draft Telecommunications Security. To address the risk…
The recent NATO hack of data from Portugal and the MBDA hack demonstrates that critical data can be taken from secure sources. The DIB has been criticized several time by the GAO for its lack of cybersecurity, that resulted in…
