This is a very serious development for the cybersecurity community and one to watch. As the SEC charges SolarWinds and its CISO with defraud investors and internal control failures relating to the 2020 hack. The SEC alleges that the company…
Closing out Cyber month a great report from AXA that reviews the top risks for 2023. With cyber in the number 2 slot behind climate change and keeping within the number 3 position consistently for the past 5 years. The…
Thank you International Security Journal (ISJ), it’s a pleasure to be published in this months International Security Journal, representing The Augusta Group (page 30). Discussing cybersecurity regulation and how it transfers cyber risk ‘Left of Bang’ into board rooms. Setting…
What does professionalism mean? As a Chartered Security professional holding a place on the UK register of Chartered Security Professionals, and an Assessor for those seeking to join the register it means allot. () It means that you have achieved…
A positive message from the Australian Government, requesting companies patch critical vulnerabilities. Ahead of an announcement of new cybersecurity strategy. Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix #paravasecuritysolutions #cybersecurity #cyberriskmanagement View Original Post
Thank you for posting Olaf Classen, a useful list of cybersecurity standards. The challenge for regulated entities is that these frameworks will not enable you to comply with U.S or EU cyber risk management regulations. EU NIS 2, DORA and…
Self attestation has never worked for cybersecurity risk management. The U.S DoD regulated cyber through DFARS self attestation under DFARS 252.204-7012, it led to failures in national security through IP theft. Capital market regulators have been raising concerns over cyber…
The UK government has Royal assent for a new Procurement Act to support small business. With an aim of protecting national security. One hopes that it includes rules to ensure cybersecurity is addressed by small business delivering in to government…
One cannot over emphasis the importance of internal audit(IA) in cybersecurity oversight, assurance and attestation. That will be required by covered regulated entities and their boards. The role of IA across ESG is magnified when one considers the effects of…
A nice update on APT 28 and its focus on French critical infrastructure. Paddington bear got a face lift, tell me that this doesn’t look like Paddington having a bad (or good) day. Switching out the marmalade sandwiches for something…
