Small to Medium Businesses (SMB) are up against it when it comes to cybersecurity, ransomware and cyber insurance. Plenty of research has shown that they invariably cannot afford the CAPEX and OPEX to meet cybersecurity standards in full, cannot afford…
A nice post. Cybersecurity is a complex problem, one that many governments and organisations have failed to address in a timely manner. The challenge is not solely the focus on the threat, its the erosion of corporate and social value…
FISMA has been around for 20 years and has been difficult for many Federal Agencies to adopt. Inspector general Audits are available that demonstrate the compliance of agencies by both Federal Inspector Generals and the GAO. In this case the…
The SEC proposal for cybersecurity risk management, governance, strategy and incident disclosure is getting air time and column inches. What surprises me is the conversations about the timeliness of incident disclosure and content shared with investors, which is important. But…
The Australian Council of Financial regulators has issued updated guidance for its Cyber Operational Resilience Intelligence-led Exercises framework. To aid preparation and execution of regulator led operational resilience testing of Australian Financial institutions. Ted Dziekanowski #cybersecurity #cyberresilience #cyberriskmanagement #regulation #theaugustagroup…
The legislative calender for cyber will kick off in September with a bang with the 2023 NDAA capturing legislation that the Financial Services sector objects. Ted Dziekanowski #cybersecurity #cyberriskmanagement #cyberregulation View Original Post
Ted Dziekanowski an eqeletic mix of comments to the SEC cybersecurity risk management proposal. Many focus on incident reporting and board ownership. Plenty for, plenty against. The response from the Bar Association is worth a read. One wonders which way…
The SEC has had a cyber enforcement unit for 5 years, delivering $2billion in settlements. It is in the process of expanding its enforcement team adding 20 staff. Including fraud analysts, investigative staff attorneys, trial counsels, and supervisors. One expects…
Thank you Christine Janesko and The Institute of Internal Auditors Inc. for considering me as the Expert for your August edition. Cybersecurity regulation is developing internationally and cybersecurity risk management are significant challenges ahead for many companies. The role of…
A sector that is cash strapped and generally a slow adopter of tech, making it a target for cyber crime. At a time when attacks and the cost of compliance is rising. #cybersecurity #cyberregulation #cyberriskmanagement #compliance View Original Post
