A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
A great overview of DORA, if it becomes law. Time will codify ICT risks under DORA for EU Financial services firms as DORA takes precedence. DORA is significant legislation for EU Finance firms, placing requirements on organisations to manage their…
Regulatory compliance in the U.S. especially in the areas of Sanctions, Cyber and Crypto is creating a compliance headache both for Federal agencies and their intended recipients. While Sanctions are not new, the convergence of AML, ESG, Cybersecurity and Crypto…
The increase in regulatory scrutiny of cybersecurity will require a closer working relationship between cybersecurity, regulatory compliance, risk management and legal. As global regulators such as the SEC and those in the European Union focus in on cybersecurity risk management,…
Last week marked a milestone in EU cybersecurity. With EU NIS 2.0 (EU Network and Information Security) and DORA (Digital Operations Resilience Act) moving forward to ratification by EU Parliament and Council members. The impact of either should not be…
Thank you for sharing Ted Dziekanowski. The U.S. Government through CISA and NIST has developed several CSF profiles for Critical National Infrastructure (CNI)(). Including Health, the Defence Industry Base, Manufacturing and Transportation, and the American Bankers Association (ABA) has a…
Ted Dziekanowski, an interesting read as EU NIS 2 moves forward. With the Securities and Exchange Commissions (SEC) proposals for cybersecurity risk management for firms with access to U.S. Capital markets and the US DoD DAFRS/ CMMC program that impacts…
A thank you to Brad Monterio, Peter Lucas, MBA and Tahmina Day, M.B.A. for arranging and participating in yesterdays U.S. The Institute of Internal Auditors Inc. webinar on Geopolitical disruption. It was a pleasure speaking at such a well attended…
This article from legal counsel is well worth a read on cloud security, security regulatory frameworks and data security that I know my colleague Ted Dziekanowski will comment on. It summarises the ‘shared responsibility model’ that cyber professionals and legal…
A proposed legal outcome that is worth taking note between the Federal Trade Commission and CafePress (). Following CafePress data breach incident in 2019. ‘In addition to a fine of $500,000, the Settlement requires CafePress to undertake a variety of…
