A great article from HBR, highlighting what boards need to do in setting the cyber risk agenda. Building cyber governance, audit, risk assessment and the need to focus to outcomes such as the risk appetite, customer, shareholder and regulatory expectations.…
One to watch. Regulators are taking direct action against companies who fail to take reasonable steps to apply cyber security controls. As the Australian Securities and Investments Commission (ASIC) taking financial advice company RI Group to the Federal Court for…
Are we seeing a rise in ATM cashouts. CISA released an advisory last week () of increased FASTCash attacks targeting banks, by North Korean hackers. In what appears to be a very profitable programme, netting around $2bn since 2015 Morocos…
Well worth a read. When what you don’t know or cannot prove may kill you, or at the very least hurt? There are plenty of data protection and cyber regulations out there, granted allot are US based. But they do…
When it comes to security I’ve not found professional qualifications which put the security professional at equivalence with say a Lawyer, Accountant, Engineer or Architect. For example you can be the CISO of a $Trn bank and require no qualifications.…
Well worth looking at. A good overview of the challenges and opportunities for CMMC. Jeff Dalton, John Weiler CMMC-CoE, TBM, Agile Acquisition. We’ve spent the past 6 months working to develop the assessment approach through the Standards and Industry Working…
I am pleased to announce that @Parava Security Solutions have signed an MOU with the Information Technology Acquisition Advisory Council (IT-AAC) and the CMMC Centre of Excellence (John Weiler CMMC-CoE, TBM, Agile Acquisition). Formed under agreement with the Cybersecurity Maturity…
Globalisation has bought many opportunities. Reduced costs, time to market and centralised natural resource processing. But it has also created complex and interconnected supply chains, ones which maybe difficult to unwind anytime soon. The US has been taking a fresh…
One to watch and thank you Mahbubul Islam CSyP for this article. The article raises a number of interesting points, which security professionals should be aware when they deal with a hack, as the boundaries between law enforcement and cyber…
Securing the corporate balance sheet is good for everyone. Shareholders, customer, suppliers and employees. CMMC will come with a cost and an assessment of economic value. Which should be made with the broader consideration of the balance sheet, not just…
