What is the biggest cyber threat between now and 2030. It’s none of those below. The biggest 4 threats are simply these. 1. The inability for companies to mitigate their cyber risk either managing it themselves or transferring it to…
I have written a white paper with the U.S. Institute of Internal Audit on the Securities and Exchange Commission (SEC) proposal for Cybersecurity Risk Management, Strategy, Governance and Incident Disclosure by public companies. The paper is written in support of…
This week the U.K. MoD released its cyber resilience strategy, a vision outlining its cyber plans for defence. It comes at a time when cyber regulation and plans of partner nations are more advanced than those of the U.K. The…
Well worth a read. Last week the chair of the SEC discussed the importance of cybersecurity with the Financial and Banking Information Infrastructure Committee (FBIIC) and Financial Services Sector Coordinating Council (FSSCC). The importance of the public and private sector…
A great read from Brian Krebs, that demonstrates the ingenuity of hackers and the complexity of cyber problem for the public and private sector. It underlines how complex cybersecurity risk management is, not just as a technology problem, but a…
I think cybersecurity risk management and ESG will converge under ESG. Cyber is a very significant risk for shareholders and US cybersecurity regulatory regimes are developing quickly. With a number of Federal legislation, regulation and enforcement programs underway and ESG…
The right models will be key to cybersecurity risk management, if the SEC moves ahead with its proposals for cybersecurity, the US DoD CMMC program is deployed, defence contractors continue with their DFARS compliance and the DoJ continues with their…
