A skill shortage that will only get worst before it gets better. U.S. and EU legislation, regulation and enforcement programs that are on statute or in the pipeline are going to increase the burden on organisations across all sectors. Raising…
An interesting article from McKinsey (just hit my in-box) on targeted recruitment to address the shortage in cybersecurity talent and reduce cybersecurity risk. With developments in cybersecurity risk management legislation ‘left of bang’, such as EU NIS 2.0, DORA and…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
A very interesting read by the WSJ on the further independent work the SEC has requested into E&Y, if you can access it. It launches a separate investigation, funded by E&Y into the role its manager and lawyers played in…
The SEC has fined E&Y $100Million for cheating by its audit professionals on exams required to obtain and maintain Certified Public Accountant (CPA) licenses, and for withholding evidence of this misconduct from the SECs Enforcement Division. () In addition to…
I started my career many years ago working in what we now call AI, developing Knowledge Based Systems (KBS/ KBE) for complex manufacturing processes in the Aerospace and Defence sector. It helped me understand the models we created were only…
For those that can get to this article from the Wall Street Journal it is well worth reading. It discuses the challenges ahead for the funding of cyber tech across Series A, B and C and cross over funding. With…
Thank you for sharing Ted Dziekanowski, yet another example of a regulator focusing down on cybersecurity risk management. With Israel’s Capital Market, Insurance and Savings Authority (CMISA) issuing 2 circulars focusing on risk management and cybersecurity risk management across covered…
SEC commissioner Peirce raises concerns about the depth and breadth of the SECs rule making agenda and whether it is overstepping the remit of the regulator. Protecting professional investors over retail investors. One wonders in some instances you have to…
This week the Securities and Exchange Commission published its Spring 2022 rule making list. For those interested in cybersecurity and regulation 3235-AN15(proposed), 3235-AN89(final) and 3235-AN08(final) are the regulations to watch. 3235-AN15(proposed) – cybersecurity, is an addition. One expected the final…
