The challenge that many governments are now starting to acknowledge is that market forces alone have not worked in managing cybersecurity risk, especially when it comes to CNI. CNI accounts for most of our important industry sectors. Cybersecurity risk management…
The US government reaffirms the need to ensure cybersecurity is in place ahead of the potential for Russia to launch cyberattacks on the US. Highlighting the importance of the private sector in managing cybersecurity, reporting cyber incidents and sharing information…
A great article on the changing agenda for US cyber security by MIT. Market forces have not worked as well as they could for many companies addressing cybersecurity. US government cybersecurity leaders are voicing that it is time for a…
US congress and Federal agencies are moving quickly with various Federal cybersecurity legislation to secure critical national infrastructure and public and private sector organisations, require incident reporting, and the implementation of appropriate cybersecurity practices. The SEC last week proposed cybersecurity…
Germanies Federal Office for Information Security (BSI) is recommending that Russian information technology business could be a source of both information and a platform for cyber attacks and they should be replaced. The BSI recommends Kaspersky anti-virus products are replaced with alternatives…
Supply chains are an ideal opportunity for disruption during these challenging economic and social times. Cyber Supply Chain Risk Management (C-SCRM) is a challenge for many manufactures, its expensive to implement and there is a lack of resources across industry…
Does the cyber insurance market need more money to underwrite cyber risk exposure? Alongside the additional capital companies need to cover the gap between inherent risk and the shortfall in cyber insurance coverage. Cyber insurance is struggling to cover the…
A comprehensive summary of this weeks Securities and Exchange Commission announcement of proposed cybersecurity risk management strategy, governance and incident disclosure reporting. That could effect covered entities on US capital markets. Ted Dziekanowski Jason Spezzano Brian McCarthy #theaugustaplan #cybersecurity #cyberriskmanagement #regulatorycompliance #cybercompliance #cyberregulation #cybergovernance #ransomeware #governance #scrm #fisma #sec View…
Yesterdays announcement by the SEC for mandatory cybersecurity disclosure will set the cyber risk management agenda for SEC covered entities, if passed. Not only does it propose mandatory ongoing disclosures by covered entities of their governance, risk management, and strategy with…
A very interesting and recommended read for those following yesterdays SEC announcement proposing cybersecurity risk management, strategy, governance and incident disclosure for covered entities. This FISMA report evaluates the SECs own compliance to information security program, practices, and NIST SP…
