The UK Financial Reporting Council, the body that regulates UK auditors, accounts and actuaries raises concerns that UK firms are not taking digital security seriously enough. ‘There was general consensus that current disclosures are not sufficient to meet investor and…
Internal audit are a critical leg of the 3 Line of Defence. They support both the CISO and board oversight, assure and attest cybersecurity. technogy and risk management compliance. Ahead of any regulatory attestation process. Shawna Flanders CRISC, CISA, CISM,…
The legislative calender for cyber will kick off in September with a bang with the 2023 NDAA capturing legislation that the Financial Services sector objects. Ted Dziekanowski #cybersecurity #cyberriskmanagement #cyberregulation View Original Post
I’ve written several times about the GAO reports that formed the foundation for both U.S DoD DFARS and CMMC programs, and the implementation of cybersecurity. The GAO identified issues in DoD weapon system cyber security back in 2018, and is…
Ted Dziekanowski an eqeletic mix of comments to the SEC cybersecurity risk management proposal. Many focus on incident reporting and board ownership. Plenty for, plenty against. The response from the Bar Association is worth a read. One wonders which way…
The SEC has had a cyber enforcement unit for 5 years, delivering $2billion in settlements. It is in the process of expanding its enforcement team adding 20 staff. Including fraud analysts, investigative staff attorneys, trial counsels, and supervisors. One expects…
I presented to The Institute of Internal Auditors Inc. in quarter 2 on the impact of Geopolitics and cyber. Cyber is a significant geopolitical risk, threat actors operate at nation state, criminal and in the grey space between the two.…
UK NHS 111 service provider suffers cyber attack. Ted Dziekanowski #cybersecurity # View Original Post
The international DIB plays a critical role in U.S national and international defense a d security. For example the F35 relies on many EU contractors. Contractors that create, process, store and transmit CUI. CUI that is regulated to be protected…
Thank you Christine Janesko and The Institute of Internal Auditors Inc. for considering me as the Expert for your August edition. Cybersecurity regulation is developing internationally and cybersecurity risk management are significant challenges ahead for many companies. The role of…
