Boards need to focus on more than vulnerabilities. Boards are being regulated to demonstrate governance, oversight and assurance over cybersecurity risk management. That requires a broad understanding of cybersecurity and risk management practices. The GIGI paper raise several points of…
An interesting case of the sensitive U.S military data that may have been leaked to China, Russia, Iran and other nations. The U.S State Department has concluded a $200 million settlement with defense contractor RTC, formally Raytheon Technologies over charges…
Given what is known, does this send a good or bad message to those that identify vulnerabilities. Thoughts? On face value does it demonstrates ignorance of the judicial system or not. Thoughts? It’s now got global visibility. Least of all…
A date for the diary. As Crowdstrike is called to testify on the 24th of September to a U.S. House of Representatives subcommittee, on the July IT outage. The U.S. House of Representatives Homeland Security Committee sent a letter to…
The problems for Crowdstrike are not over. The effect of the incident won’t be felt on their balance sheet for another 3 – 4 quarters. Until contract renewals take place; regulators state their position; insurers conclude their processes; Crowdstrike executives…
A message needs to be sent that cyber crime cannot be tolerated. Unfortunately with profits we’ll in the black for cyber criminals, nation state tensions running high and good times to be had by criminal gangs. One is not convinced…
Gerry Kennedy, the problem for insurers and the insured is cyber risk management is a responsibility of both parties. As has been repeatedly raised market forces have failed to demonstrate the management of cyber risk. To the extent that it…
Has the Snowflake cyber attack contributed to a material risk to Snowflake? This article makes good points about the challenges ahead for snowflake. If correct sales and marketing costs are 46% of revenue and R&D is 50%, and the company…
Is there trouble ahead for cyber insurers? As cyber attacks increase, aggregated losses increase and events such as Crowdstrike demonstrate the global effects of ICT risks. Gerry Kennedy could payouts outpace profitability, could loss ratios start to creep up, is…
Malaysia’s cyber law comes into effect this week, establishing a broad compliance framework that pulls together the National Cybersecurity Security Committee, Chief Executive of the National Cyber Security Agency, National Critical Information Infrastructure (NCII) entities and cybersecurity providers. The law…
