The global reliance on shipping cannot be underestimated, 90% of the carriage of world trade is due to shipping. There has been a dramatic reduction in physical losses, but all four of the largest shipping companies Maersk, Cosco, MSC (and…
The enclosed is an interesting read focusing on the changing job market in the U.S for lawyers. Specifically the role of lawyers in ‘Cybersecurity transformation’, with the Chief Legal Officer (CLO) and their teams becoming more involved in cyber. 77%…
Being CISO is not the easiest of jobs, burn out is not new and will likely get worst before it gets better. The role is enterprise wide, as broad and as deep as an organisations data, the physical and logical…
John Mackenzie AARPI GRCP M.ISRM NIT.SIG MAISA training is always used as the way to solve the problem, it’s not unique to Australia. But cyber requires more than training, it requires recognition by Industry that cyber is a problem and…
U.S Federal government has had risk management in place for 20 years with FISMA, a risk based framework for the management of cybersecurity (information). FISMA unfortunately has had a patchy implementation with a poor record of compliance across Federal government.…
Underwriting cyber insurance has taught the re-insurance industry allot about underwriting complex, catastrophic risks, that one assumed they already knew a lot about? Lloyds recently announced that it would not support the underwriting of Nation State Attacks, that is likely…
Is there a slow realization that companies will need to implement cybersecurity risk management practices if they want cyber insurance? Cyber legislation may come to the rescue of the insurance industry. Current cybersecurity risk management proposals and regulation looks to…
Thank you for posting Ted Dziekanowski. The SEC proposal is one of several recent cybersecurity risk management Directives, Acts and proposals submitted by U.S and EU regulators in the 1st and 2nd quarter 2022. That include the requirements for cybersecurity…
Several nations are moving to protect Critical National Infrastructure from cyber attack, through proposed legislation and regulations. The UK is developing regulations and a code of practice for Electronic Communications (Security Measures) and draft Telecommunications Security. To address the risk…
The recent NATO hack of data from Portugal and the MBDA hack demonstrates that critical data can be taken from secure sources. The DIB has been criticized several time by the GAO for its lack of cybersecurity, that resulted in…
