The gap between cybersecurity awareness and risk mitigation is not closing. At a time when the frequency, complexity and severity of cyber attacks continues to increase. A gap that will have an impact on companies as the regulatory environment for…
Ransomware is a critical cyber threat vector, whose impact is increasing and only set to continue a trajectory of year-on-year increases. Setting the agenda for increased cybersecurity risk management legislation, regulatory enforcement and a continued focus on cybersecurity legislation, education…
For those National and International DIB contractors this report is an interesting read. The DoD is undergoing its own assessment of cybersecurity compliance, for the oversight and assurance of Controlled Unclassified Information (CUI). Making progress in complying with FISMA (DoDi…
We live in difficult times. Food price inflation driven by increases in the price of raw materials such as flour, oil and gas are making life difficult for millions of people. We know from past experience that hackers aim for…
Well worth a read. The EU council announced on the 11th of May 2022 that it had reached an agreement for its Digital Operational Resilience Act (DORA), that will impact EU FIs and require the oversight and assurance of ICT…
The U.S. Department of Justice has updated its policies for charging case under the Computer Fraud and Abuse Act, allowing legitimate white hacking. Urging prosecutors not to bring cases against legitimate cybersecurity researchers under main U.S. anti-hacking law, enacted in…
The Geopolitical debate on cyber seems to be a hot topic. The Washington Post debates Securing Cyberspace with U.S Congress Representative Michael McCaul, Republican of Texas, and Representative Elissa Slotkin, a Democrat of Michigan. They discuss the lack of rules…
Last night the UK Attorney General Set out the UKs position on cybersecurity, international law and the need for a clear framework for cybersecurity, that make clear when state action is unlawful. Treating a cyber-attack the same as a physical…
The regulatory agenda for cybersecurity risk management is developing as are the roles of the cyber, legal and risk professional in regulatory compliance. Providing oversight and assurance of cybersecurity risk management to the board room and in turn regulators. That…
A nice article on the importance of Enterprise Wide Risk Management and ESG from the American Bankers Association. It describes the importance of the risk function in ensuring and promoting safe and sound practices, supporting strategic goals for ESG. The…
