The UK Governments National Cyber Security Center has a new head in the form of Richard Horne. The first time the NCSC has put a person with cybersecurity experience and academics at the helm of the department responsible for the…
CISA issued a critical advisory for an exploitable software flaw in SolarWinds Web Help Desk. Giving Federal Agencies three weeks to comply. The patch is to resolve an issue of hardcoded credentials that allow remote unauthenticated user to access internal…
Thank you for posting Oliver F. Gosemann, a great summary demonstrating the challenges boards face with cybersecurity risk management. A worrying 66% of companies believe that their organisations face an existential threat from cyber. Cyber is no longer an informal…
Citi has been under the regulatory spot light for a few years. Recently the OCC amended a Cease and Desist order relating the Citi’s enterprise-wide risk management, compliance risk management, data governance, and internal controls transformation programs. Issuing a $75…
A great post Brian D. McCarthy, as cyber regulation increases the burden being placed on the role of CISO is increasing. Yesterdays post on burnout being one such consequence. While one cannot doubt that the role of the CISO is…
As the U.S election looms, what will be the impact on cyber in the U.S. On one side its a major risk for the public and private sector, on the other cyber regulation could be seen by some as a…
Apologies, @Thaddeus Dziekanowski, its behind a firewall. There’s a reason why we developed the Augusta Plan back in 2021, that we presented to the United States Department of Defense, U.S. Cyberspace Solarium Commission and Office of the National Cyber Director,…
A great article on the pressures placed on cybersecurity professionals and attrition, that continues to paint a worrying picture for the future of cybersecurity risk management. At a time when cyber attack frequency, complexity and severity are on the increase.…
So the recent TLF cyber attack, was it a more than an attack on Underground systems? @Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity #cyberriskmanagement View Original Post
Here in lies a problem for the insured, insurer and governments, being caught in the ransomware doom loop, or as one calls it damned if you do damned if you don’t loop. 99% of companies by number are SMEs, they…
