This is going to be one to watch Ted Dziekanowski for many reasons. Firstly the allegations may have already made their way to Congress and Federal Agencies citing issues of national security and poor management of internal controls. An effort…
With note, Cyber risk overtakes financial risks as top concern for the worlds largest sovereign wealth fund. Im worried about cyber more than I am about markets,†Tangen (CEO) told the Financial Times. Were seeing many more attempts, more attacks…
Should cyber risk be a separate vertical alongside Credit, Market and Operational Risk. For financial institutions the trend has been to consolidate non-financial risks, including cyber, under a ‘non-financial risk’ function. To bring together and simplify the oversight and assurance…
A great example of how cyber awareness is permutating Federal agencies. Data has always been ‘back gold’, the most important asset for governments and organisations, as the DoD recognises. With the theft of DoD weapon system IP. Data creation, theft…
My understanding is that DoDi 8510.01 and DoDi 5000.90 enable the DoD to implement FISMA, the RMF and for a Purchase Officer(PO) to assess risk before an ATO is issued. () That would imply that a PO has the scope…
Thanks for posting Ted Dziekanowski It seems that some U.S and EU regulators are taking a leaf out of the SEC book. Setting regulatory regimes that place the responsibility on boards to implement, assure and attest cybersecurity risk management compliance.…
‘Cybersecurity key to participating in global markets’ Investment in Africa will be correlated to the ability to manage cybersecurity risks. 29 our of 54 countries have implemented cybersecurity legislation, and with legislation comes the challenges of enforcing compliance. #theaugustgroup #cybersecurity…
A nice summary of SOC. A SOC assessment can be used to place a level of assurance over internal cyber controls ahead of regulatory attestation. As the article points out, they can be delivered through internationally recognised and accredited institutions…
NIST Cybersecurity Framework Profile (CSF) 2.0 gets underway with a well attended workshop this week, hosted by NIST. Providing an opportunity for the NIST community to come together and discuss the development of the CSF over the past 9 years…
Does the UK have a defensive cyber strategy? The U.S Federal Government is starting to come to terms with the need to secure critical national infrastructure and regulating for it. The EU is adopting EU NIS 2.0 and the Australians…
