The SEC has published its Spring 2021 regulatory agenda. It’s of no surprise that cyber is down on the list. The SEC is proposing regulation for ‘Cybersecurity Risk Governance’, implying cyber oversight and assurance regulation for US public companies could…
Linked to the announcement on Friday that Department of Energy National Nuclear Security Administration subcontractors Sol Oriens has been hacked. Invenergy the $ Billion Chicago based clean energy firm said on Friday that it had been hacked by REvil, but…
It’s hard to deploy cybersecurity for all companies, least of all SMEs. I recently looked at the average spend of the top 10 global Tier 1 banks and they all spend over $500 million a year on cyber each. Deploying…
If ESG reporting requirements continue to follow their current trajectory and don’t get derailed, then in all likelihood they will get rolled to the boardroom enforce and not just impact corporate America, but all publicly trades company on US markets.…
ESG reporting is a hot topic for the investment community. ESG reports provide the investment community with a corporate view of the material impact of ESG related risks to their balance sheet and the action the company is taking to…
Following on from the release of the GAO report on the challenges cyber insurance policy holders face earlier this month. Whilst central to government policy Congressman Jim Langevin, a co-chair of the Cybersecurity Solarium Commission makes the point that during…
The US takes action against Russian following the recent cyber attacks. View Original Post
There are lessons to be learnt from managing legacy equipment. Mandiant identified the threat actor behind the cyberattack and data theft involving Accellions legacy File Transfer Appliance product. Which has been associated with the ransomware reported by Bombardier this week…
The European Commission presented a new Cybersecurity Strategy in December 2020. The Strategy has three pillars: 1. Resilience, technological sovereignty and leadership – Reforming the rules on the security of network and information systems. Creating a network of Security Operations…
The US builds a considerable team to work on cyber security. but one critic is that it is heavily biased toward public sector appointment with little commercial sector experience. Balancing public and private sector experience will be important to ensure…
