Once we had silent cyber, now we have silent AI. Interestingly, AI is being categorized as a force multiplier for other enterprise-wide risks and associated losses across technology E&O, professional indemnity, and D&O policies. Yet cyber is also a risk…
Thank you Tom McLeod, insightful as always. One must also remember that many companies have not addressed governance over cybersecurity risk management, governance over data and governance over cloud. That are pre-requisites for governance over AI.The Internal Audit community faces…
Will insurers move to targeted insurance products, rather than broad coverage products?Brian D. McCarthy @Thaddeus Dziekanowski Faisal KhanVeritas GRC#cybersecurityriskmanagement #cybersecurity #cyberinsurance View Original Post
While there are doubts about the benefits of AI and the value it delivers to corporates. Over time AI will become ‘the way we do business’, if nothing else it enables us to search through masses of information to identify…
Moving the risk management pieces around the chess board. As the public and private sector continues to come to terms with cyber and ICT risk. The last time system risk was put back on the tax payer it cost governments…
The January 2025 deadline for DORA compliance is approaching. Comments by the Chair of the Joint European Supervisory Authorities (ESAs) Sub-Committee on Digital Operational Resilience, at a recent DORA event highlighted the pace of change of cybersecurity regulation in the…
This is a must read letter, relating to the United Health cyber-attack. On the 1st of May 2024 the Senate Finance Committee requested the CEO of United Health attend a Committee hearing to discuss the the February 2024 cyber attack.…
The U.S accounting regulator, the PCAOB, wants audit firms to take on more responsibilities for the detection of fraud. That includes greater oversight of cybersecurity risks (). Changes that members of the audit profession see as an overhaul of the…
Another domino falls. View Original Post
The regulatory agenda for cyber is forming quickly. The ONCD national cyber strategy is due in the coming weeks, the EU published NIS 2.0 and DORA, and is planning the Cyber Resilience Act (CRA). The DoJ, DoT and FTC have…
