‘Everyone needs to know where the puck is going and have a basic plan of how to get there.’ Cyber is a complex, regulated and resource intensive risk to manage, and a risk insurers are finding difficult to effectively underwrite.…
A very informative and balanced read. The full report focuses on the evolving cyber regulatory environment, recent cyber case law and the role U.S federal agencies such as the FTC, SEC and DoJ are adopting for cybersecurity and digital. It…
A nice article on the challenges facing organisations and cyber insurance. I have to say I think the cyber insurance market is in turmoil. On one hand there are predictions that the market is going to be worth $Billions by…
Over 90% of companies in most economies are made up by Small to Medium sized business. Companies that do not generate the revenues to be able to implement the range of cybersecurity protection and defenses required. By way of example…
A great read providing a comprehensive view on how NATOs role in Cybersecurity has developed since it became a domain of operation and what the future role could look like. For example NATO setting up its own cyber command; greater…
Are cyber insurers bracing themselves for a large cyber incident, through single points of failure that have a consequential impact on other domains, such as an attack on CNI? Cyber is only an insurable risk with intervention from the cyber…
Are Europe and NATO heading for a cyber compliance tsunami? With the amount of US defense hardware heading into Europe, what will be the impact on the European Defense Industry and compliance to US DoD DFARS and CMMC regulations for…
I am please to have been asked by The Institute of Internal Auditors Inc. to participate in their webinar discussing the recent proposal by the Securities and Exchange Commission (SEC) to regulate cybersecurity risk management, strategy, governance and incident disclosure.…
Many are commenting on the SECs requirements to report material incidents in 4 days, or for CNI providers to report incidents to CISA in 3 days. US financial services regulators expect cyber incidents to be reported to their banking organization’s…
A good read from the World Economic Forum (WEF), discussing the Securities and Exchange Commissions (SEC) proposal for cybersecurity risk management, strategy, governance and incident disclosure. If the SECs proposal makes it to regulation, it is likely to have the…
