Ted Dziekanowski thank you for posting our article. Cyber regulation shifts cybersecurity risk management compliance ‘Left of Bang’ on to the financial statements, and into the board rooms of covered entities. EU NIS 2.0, DORA, the SEC proposal sets board…
A great article written earlier this month by James Dempsey discussing the impact of enforcement in cyber regulatory compliance. The breadth of cybersecurity regulation being released by U.S, EU and Australian regulators in 2022 and so far in 2023 is…
Cyber attacks resulting from third party suppliers poor cyber are one reason regulators are focusing on the ICT industry and the role it has in cybersecurity risk management. The list of companies affected by the GoAnywhere security issue is a…
I fear that Australia is playing cyber catchup with other jurisdictions and that we are seeing the concentrated the effects of attacks on a small country dependent on digital. Ted Dziekanowski Stephen Pitt-Walker, JD, FGIA #cyberattacks #cyberriskmanagement #cybersecurity #governance View…
The debate around the Latitude bank hack continues, with a fair and obvious point. If the data was stolen from third party suppliers, the responsibility for managing risk may be transferred to third party suppliers, the accountability for managing the…
For any organization considering the Securities and Exchange Commissions(SEC) Proposal for Cybersecurity Risk management, that maybe released in H1 2023. The enclosed audit by the SEC Office of the Inspector General of the SECs 2022 compliance to FISMA 2014 is…
The Securities and Exchanges Commission (SEC) drive for cybersecurity regulation does not look like it is wavering. One expects the SEC to release their requirements for public companies to declare their cybersecurity governance, programs and individual expertise in the coming…
Cybersecurity risk management is not cybersecurity. Cybersecurity risk management requires organizations to adopt a cybersecurity risk management framework, cybersecurity practices and governance. To identify, evaluate and mitigate its cyber risks by adopting and managing appropriate controls. Enabling boards to present…
This is an important read. The U.S Department of Justice (DoJ) recently released the enclosed evaluation of Corporate Governance Programs. The DoJ Evaluation of Corporate Governance Programs update aims to provide further guidance that prosecutors should consider in conducting an…
It a pleasure to be working with Rachel V. Rose, JD, MBA and Ted Dziekanowski to deliver Continued Learning and Education (CLE) in cybersecurity risk management for Attorneys in the U.S. We aim to deliver a 4 part series (over…
