With the SEC cybersecurity risk management program pending and U.S DoD DFARS/ CMMC, one has to wonder the role of Whistblower program in cybersecuirty risk management compliance? The U.S DOD DFARS program requires covered entities to implement NIST SP 800-171…
Cybersecurity is a challenge for Japanese organizations as cultural dynamics and a feeling of trust, rooted in ‘why would it happen to me’ prevail. Experiencing this first hand as the the head of cybersecurity and operational risk for a Japanese…
The Uber CSO case has come to a conclusion with the ex-CSO receiving 3 years probation and a $50,000 fine. It brings to an end what is a distressing time for Mr. Sullivan, a clear problem for Uber, and precedence…
Thank you Olaf Classen for posting. The attack on Evotec would just fall under the carpet as just another cyber attack. But this attack demonstrates alternative consequences for a company following a cyber attack. If as is reported, the company…
Further depth on the Uber CSO case. While it maybe felt that the verdict is misplaced, maybe based on the historical perspective of the 2016 incident. The judge was clear and possibly lenient. Sending a message that won’t be the…
The SEC has issued its largest Whistleblower fine to date. At $279 million it is more than double its nearest payment and sends a very clear message that whistleblowers that provide information leading to successful enforcement actions are valued. SEC…
Cyber threats evolve. We saw it during the pandemic when attacks focused more on home users to access corporate networks, and we’ve seen it as ransomware has evolved to be a predominant cyber threat. One believes that we are starting…
Cyber incident containment as the City of Dallas works to manage what is reportedly a cyber incident. With U.S local government ransomware attacks happening at a rate of 1 a week, this attack on a city as large as Dallas,…
Thank you Ted Dziekanowski for posting. Today will be a challenging day for the security community as the Uber CSO is sentenced, the outcome of which may set precedence for cyber professionals globally. The DoJ sentencing memo was considered, reflecting…
There is convergence of maritime and DoD cyber compliance. While the Marinette Marine Shipyard falls under CISA for CNI, it also likely falls under the DoD as a defense covered entity under DFARS 252.204-7012, 7019 and 7020. Requiring the implementation…
