The old and the new, protecting your infrastructure is coming down to how many layers you can put in place across internal and external detection, heuristics, controls and remembering that if you have old infrastructure you are likely to have…
Compliance with the EU-GDPR will not go away with BREXIT, View Original Post
Are the issues with Swift, following on from the Bangladesh bank heist, bigger than first thought? View Original Post
The devil is going to be in the detail on cyber insurance. Each policy may have to be taken on its merits and you may not know what will be covered until you have a breech and claim. In my…
Is Zurich now moving into the CERT market? It does make sense, its a bit like your insurance company mandating who fixes your car after a bump. Keeps the costs down and goes part way to ensuring that the issues…
The information security professionals (CESG) of the security services agrees that information security should be risk based and that a companies controls environment should be proportional to its risks. View Original Post
Putting the board on notice that they are responsible for cyber. If enacted will it place the right level of focus on the subject? View Original Post
View Original Post
I have to agree, I’m not convinced that you can transfer cyber risk through cyber insurance. The very systemic nature of the risk, its breadth and depth of impact and complexity of risk mitigation, in my view, gives plenty of…
The CISO’s role is a difficult one, you cannot be everything to everyone. The C suite has a role to play and they need to be communicated to, take responsibility and accountability for security related risks. The CISO should support…
