The statistics from ENISA on cybersecurity investment does not paint a great picture over the adoption of NIS, as EU NIS 2 and DORA head down the road in 2024. It highlights what one could consider worrying trends in cybersecurity…
As a thought for the weekend. 50,000 companies in the EU will have to report environmental impact data to investors and customers. Starting with 11,000 in 2024 and expanding to small and medium sized businesses in 2025 and 2026. Eelco…
Insurers are caught between the proverbial rock and a hard place. On one hand having to manage the risk of cyber attacks on their own infrastructure, on the other manage the risk of their clients. Picking up regulatory capital to…
A very important read for FIs in the EU, as European Banking, Insurance, and Securities regulators start the consultation process on the Digital Operational Resilience ACT (DORA). That will effect EU Financial Institutions from 2025. The EU Banking Authority, Insurance…
Thank you Rachel V. Rose, JD, MBA for cohosting a great CLE session yesterday with attorneys, discussing U.S and EU cyber regulation including the #ONCD national cyber strategy, #securitiesandexchangecommission cyber proposal, #cmmc , #eunis2 #dora , and the #cyberresilienceact. Compliance…
Thank you for posting Ted Dziekanowski. I wonder if the challenge ahead is more one of setting a baseline for cybersecurity compliance, working and enforcing it. It is clear that the U.S is not the only nation that has struggled…
Is there a global consensus building that the tech sector should be held liable for cybersecurity, or the failure of cybersecurity? As the Australian Government considers. ‘â¬Åcreating a legislative framework to shift cyber security risks away from our most vulnerable…
Thank you Hill Dickinson LLP for arranging this event. I am looking forward to discussing cybersecurity risk management, the rise in cyber regulation by the U.S, EU and Australia. Regulation that transfers cybersecurity risk management to the corporate, away from…
Cyber risk ratings, there’s an interesting challenge. Not so much the concept, but the execution. Who decides what good looks like and the rating structure. At present EU cyber regulation such as NIS 2 and DORA set requirements for cybersecurity…
A nice article from the WSJ on the cyber regulation from the 1st March that U.S, EU and APC boards should be concerned about. There are a few additional regulations that also need to be considered including the Bidden Harris…
