The UK Government and Ministry of Defence has published its 2025 Strategic defence review. It makes for an interesting read, especially the references to ‘industry’ and ‘cybersecurity and the Electro Magnetic Domain’, section 7.6. Positive to see that the MoD…
Currently Artificial Intelligence(AI) assurance and audit is defined by ISO 42001 and NIST AI Standards. Frameworks and standards used to assure public and private sector AI risk management. This month Veritas GRC, Knowledge Nexus and The Government of Dubai Legal…
Lets not put ‘rose tinted goggles’ on here. We may have moved to a point of no return with cybersecurity, and the threat it poses to national, economic and social security. Scattered Spider is working with nation state threat actors.…
Great quote ‘ We are winning every battle, but losing the war.’ An update on Scattered Spider, reportedly behind cyber attacks in the UK and attacks across the US. The report highlights the relationship between Scattered Spider, Russian threat actors…
A great Sunday read. A study published this week by Michelle Lowry, Anthony Vance, Marshall Vance examining how boards oversee cyber risk. This study examines how corporate boardsâ€â€often lacking technical expertiseâ€â€approach cybersecurity oversight. Drawing on interviews with directors, CISOs, and consultants, we…
The Australian Government legalised the reporting of cyber ransomware payments under their 2024 cybersecurity Act, with enforcement commencing this weekend. As we sit and watch cyber attacks unfolding in the UK including Marks and Spencer the Co-op and Peter Green…
The Australia legal system is likely to take a stance on the role of Non-Executive Directors in the oversight and assurance of corporate performance. The Star Hotels case is not widely known outside Australia, but its causing a stir. The…
It’s positive to see the UK starting to fund cybersecurity. But why does it feel that the horse has bolted and is half way over the paddock 4 fields away. Before we woke up the the reality of cyber being…
One would open by saying welcome to the new normal, but, its not the new normal, its now just normal. Business has faced cyber insecurity for many years, its just not darkened UK shores with such visible abundance or interest…
Great to be working with Tanya Gass from Norman Broadbent Plc discussing the importance for boards to place greater emphasis on the governance, oversight and assurance of cybersecurity risks. Cyber is a well documented board risk. Boards at Marks and…
