The UK Financial Conduct Authority issued a dear CEO letter to the insurance market last week. A letter that discussed Putting consumers’ needs first and the regulators wish for firms to demonstrate that products meet customers needs and provide value.…
The SEC final rule sets out clear accountabilities and responsibilities for cybersecurity risk management oversight, assurance and attestation by boards, board subcommittees and accountable executives. As the Uber case demonstrated the CISO is an accountable executive. The board will be…
The well documented collapse of Carillion in 2018 is an example of the failure to provide adequate financial oversight and assurance. The directors of Carillion have faced fines and board room bans, in a scathing report on the company’s corporate…
The EU has taken a broad integrated approach to cybersecurity risk management regulation. Be that through the EU Cybersecurity Act, EU NIS 2 Directive, Digital Operational Resilience Act (DORA), the Resilience of Critical entities Directive, the proposed Cyber Resilience Act…
Our economies face many global challenges that call for globally coordinated solutions. Challenges and crisis that test economic and financial systems that rely heavily on good, coordinated governance. Our need and reliance on stable well managed financing to manage crisis…
Ted Dziekanowski isn’t the DoD meant to implement FISMA and DoDi 5000.90, that requires the adoption of NIST 37, CSF including IAM, zero trust. So it doesn’t have to break anything? Does anyone have a copy of the DoD IG…
You will spend money to manage cyber. New York state’s attorney general is forcing a college to invest $3.5 million into cybersecurity after a 2021 data breach. The attorney general’s office began its investigation of the situation in August 2022,…
The U.S 2023 Omnibus bill included a little publicised addition from the FDA. Requiring the manufacturers of medical devices to implement a cybersecurity plan, including through life support for vulnerabilities, SBoM and consumer communication on vulnerabilities. Before products can be…
Thank you for posting Olaf Classen, as you point out the 8-K filing has been made and raises the material effect of the cyber attack on Clorox. The markets seemed have taken little action from the 14th of August, albeit…
Brian D. McCarthy you raise good questions. As registrants must describe the boards oversight of cyber risks, any board committee or sub committee responsible for oversight, the processes by which boards are informed of cyber risks, managements role in assessing…
