The U.S is going through some cyber and technical challenges. With the Microsoft encryption key problem and the potential for chinese malware in CNI infrastructure close to military bases. Now the DoD has had a critical compromise of communications equipment,…
Spare a thought for entities covered by the Australian Prudential Regulator, following the announcement by the SEC to regulate cyber. The APRA will expect boards of covered entities to oversight cybersecurity. 1. APRA says boards are ultimately accountable for operational…
Very concerning, this will likely be hunting for a needle in a haystack, the U.S has procured Chinese power and communications equipment for many years. For CNI where one suspects there is little redundancy. It begs a question, given the…
One would argue Ted Dziekanowski that there needs to be common agreement between the U.S and partner nations on harmonising cybersecurity regulations and standards. You cannot expect UK organisations that operate cyber essentials (there are very few of them) to…
Boards of U.S listed companies have to oversight, assure and attest material risks, irrespective of the SEC Final ruling on cyber for many years. Cyber has always been a material risk, tested to a lesser degree under SoX since 2002.…
While the cybersecurity community gets engrossed in the SEC Cyber final ruling. A thought should be paid to the enclosed from the Securities and Exchange Commissions Chief Accountant ot the oversight of crypto trading platforms by audit firms. Why? The…
With the U.S ONCD, EU, Australia and Federal Agencies incuding the SEC, TSA, DoD and FTC amongst others, all moving forward with cyber regulation. Harmonisation and reciprocity is important. U.S and EU market and industry regulators have chosen in general…
The SEC has now finalized cybersecurity risk management for companies covered under the Securities and Exchange Act 1934, that includes foreign registered companies. It is a significant cyber regulation, with global, cross sector impact. A regulation that if past SEC…
The Chair of the SEC and Commissionares approved the SEC cyber final ruling 3:2 Ted Dziekanowski. Reporting cyber compliance in annual reports starting on or after 15th December 2023 and 18th December 2023 for incident disclosure. Now the work begins,…
Certification does not a cyber professional make. Nor are they a bad thing, especially given the challenges we face with managing cyber risk. But we have to recognise the gaps between certifications and the experience and skills need to comply…
