Ted Dziekanowski Setting common criteria for nation states to agree and authorize common regulatory, cyber and risk standards. That everyone can agree upon and operate across national boundaries. Following a method that has already been created and adopted by several…
Data and cybersecurity compliance is a National Security conversation. While the implementation of data security legislation such as GDPR is important for the protection of PII, alignment with international standards and partner nations is an important consideration for National Security.…
An interesting report on the state of the CISO market, primarily in the U.S. Stress and Burnout are still significant issues for CISOs. But changes are starting to take place as CISOs progress towards the board room, as regulation develops…
Today the UK launched its Maritime security strategy. Cyber gets 53 mentions across the 116 pages. At a time when the EU has released NIS 2.0 that includes maritime as critical national infrastructure, the U.S. has passed cyber regulation to…
An important read by Chris Inglis the White House National Cyber Director. As with Kinetic warfare highlighting the need to balance both ‘offensive’ and ‘defensive’ capabilities. Chris Inglis pointed out (sic) The only reasonable solution is to get serious about…
Small to Medium Businesses (SMB) are up against it when it comes to cybersecurity, ransomware and cyber insurance. Plenty of research has shown that they invariably cannot afford the CAPEX and OPEX to meet cybersecurity standards in full, cannot afford…
A nice post. Cybersecurity is a complex problem, one that many governments and organisations have failed to address in a timely manner. The challenge is not solely the focus on the threat, its the erosion of corporate and social value…
FISMA has been around for 20 years and has been difficult for many Federal Agencies to adopt. Inspector general Audits are available that demonstrate the compliance of agencies by both Federal Inspector Generals and the GAO. In this case the…
The SEC proposal for cybersecurity risk management, governance, strategy and incident disclosure is getting air time and column inches. What surprises me is the conversations about the timeliness of incident disclosure and content shared with investors, which is important. But…
The Australian Council of Financial regulators has issued updated guidance for its Cyber Operational Resilience Intelligence-led Exercises framework. To aid preparation and execution of regulator led operational resilience testing of Australian Financial institutions. Ted Dziekanowski #cybersecurity #cyberresilience #cyberriskmanagement #regulation #theaugustagroup…
