A Canadian court has approved a $200M settlement against Desjardins bank, following its 2020 data breach that affected 4.2 million customers. It is an example of the regulatory precedents being set by courts in Canada and an example of the…
U.S. National cyber Director said the approach to U.S. Federal cybersecurity and investment is not working and needs to be transformed. He has commented previously on his belief that cybersecurity needs to be managed following a whole of society approach.…
A comprehensive cybersecurity and telecommunications bill has been introduced to Canada Parliament this week, enacting the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national…
For those following the regulatory developments for cybersecurity risk management, continue to read. Last week under the Securities and Exchange Act of 1934 the Options Clearing Corporation (OCC) filed with the Securities and Exchange Commission (SEC) a proposed rule change…
The head of the FBIs Cyber Division confirms the DoJ, FBI and CISA are working closely together on cybersecurity oversight. With all sides working to address the issue of liability protections and sharing of breach information. Ted Dziekanowski #cybersecurity #cyberriskmanagement…
Are cyber vendors starting to feel the pinch as economic headwinds affect capital markets. At a time when regulators are looking to enforce cybersecurity? Several factors are coming together in the cyber market place. The tightening of capital market liquidity;…
A history of the 2022 cybersecurity announcements by the Securities and Exchange Commission (SEC). A great read from the NLR that provides a concise picture of the relevant announcements made by the SEC this year. Focusing upon cybersecurity assurance, legislative…
An important read. Federal Cybersecurity oversight of the U.S. DoD DIB makes a broader comeback in the latest draft of the 2023 NDAA. As the House Armed Services Subcommittee on Cyber, Innovative Technologies, and Information Systems voted to approve its…
The EU and its public and private sector organisations face a more significant issue from cyber regulation. While the EU has recently released the EU NIS 2.0 directive and a draft proposal for Digital Operational Resilience Act (DORA), requiring tighter…
An appropriate refresher from the Securities and Exchange Commission (SEC) on the role of audit. Audit is critical to regulatory compliance, providing investor confidence and boards with the appropriate oversight and assurance of both financial and non financial risks. Long-recognized…
