The European Commission has initiated infringement proceedings against 23 member states for failing to implement the NIS 2 directive, and 24 member states for failing to notify national measures to implement the resilience of critic entities (CER) directive. Directives that…
One has to give it to our EU colleagues, when all 27 member states get behind a problem it gets focus. As is the case with cyber regulation, in this case EU NIS 2.Why is the enclosed document important? It’s…
A great article from the Harvard Law School Forum on Corporate Governance, relating to board governance, regulatory compliance and fair disclosure of cyber risks, as they relate to the SECs oversight of cybersecurity. In ones view it’s not the cybersecurity…
A week of healthcare cybersecurity regulation on both sides of the pond. With noises the EU will focus on healthcare cyber next year and bills being put forward in response to the 2024 United Health cyber attack.The enclosed is a…
The SEC – SolarWinds case was one of the first major, public, forays to oversight cybersecurity risk management of participants in U.S capital markets. While in this case there maybe an evens chance that the legal strategy is to push…
2025 maybe the year that the EU focuses on cybersecurity risk management for the EU health sector? Under Ursula von der Leyen, got approval for a new EU commission this week. Christiane Kirketerp de Viron, Acting Director for Digital Security,…
Other than the fact that the ransomware attack has affected major retailers in the US and UK.This statistic is worth noting from the article“We were getting five major ones a year back in 2011, now we’re getting 20, 25 major…
Ah@Thaddeus DziekanowskiVeritas GRC#cybersecurity #cyberriskmanagement #cyberegulation View Original Post
Olaf Classen thank you for posting. A very important read for EU organization required to comply with DORA. TLPT is the start of validation of covered companies cybersecurity.One has been involved in many pen test of financial institutions. Pen testing…
Thank you for posting this Brian D. McCarthy. The EU NIS 2 implementation regulation is an important read for any company covered by the regulation. especially it has to be noted that it is REGULATION, it is not guidance. The…
