The challenge for companies is that cybersecurity products do not a secure business make. The cyber regulatory landscape is getting tougher, cyber insurance is struggling to fill the inherent – residual cyber risk gap, and expectations are that organisations will…
Thank you IFACI for the opportunity to discuss cybersecurity risk management, the impact of international cyber regulations, and the role of Internal Audit as the 3rd Line of Defence. Many disagree with the ‘stick’ approach of regulation to address corporate…
Ted Dziekanowski Cyber is rumbling along waiting for the right moment and no one is quite sure publicly to attest to the capabilities of any side in the Ukraine Russian Conflict. Plausible deniability can be made for the gas pipeline…
Cyberattacks may not be the new norm for everyone, but the once low probability attacks that used to affect websites through DDoS or poor configuration and patch have been replaced by extreme loss, higher probability, high severity threats. We have…
I am looking forward to supporting the U.S Institute of Internal Audit with Shawna Flanders CRISC, CISA, CISM, SSGB, SSBB in October, as they kick off their program for Cybersecurity Month. On the 4th of October we are having a…
NIST 171 is relatively straight forward to align to other control frameworks and will have to align to other standards if the SEC cyber proposal move ahead. Public Prime defense contractors will be required to implement cybersecurity risk management and…
Here is a thought for today. There is a Venn diagram for ESG and the relationship between Environmental, Social and Governance. There is also a Venn diagram between ESG, cyber risk management and insurance, that if unbundled creates an intersection…
A great article focusing on the challenges that the Uber CISO currently faces in court following its 2016 hack, and the companies approach to resolving the problem. It’s not the first time a CISO has found themselves in court, but…
Three important developments B. Stephanie Siegmann from the U.S impacting R&D, regulatory enforcement, false claims and Chip development. I would also add the recent White House EO on Foreign investment. Cyber is a national security issue. I wonder the impact…
Thanks for posting Ted Dziekanowski The DoJ is moving ahead with its program requiring CEOs and Compliance Officers to attest the effectiveness of their corporate compliance. Applying it earlier this year in the Glencore resolution. With the amount of cybersecurity…
