The regulatory agenda for cybersecurity risk management is developing as are the roles of the cyber, legal and risk professional in regulatory compliance. Providing oversight and assurance of cybersecurity risk management to the board room and in turn regulators. That…
A Norton Rose survey identifies cybersecurity as an area of concern for litigation by corporate General Councel. With Financial institutions increasingly feel more vulnerable to cybersecurity-related disputes as compared to other industries, with 79% of financial institution respondents reporting feeling…
A good read from the World Economic Forum (WEF), discussing the Securities and Exchange Commissions (SEC) proposal for cybersecurity risk management, strategy, governance and incident disclosure. If the SECs proposal makes it to regulation, it is likely to have the…
If you are a security professional then I strongly recommend you register and review the Law360 article on SolarWinds. A US judge has kept open an investor suit against the company, following allegations from SolarWinds investors that the software firm…
NIST CSF profile provides organisations with a framework for the oversight and assurance of cybersecurity controls. CSF profiles provide many advantages over traditional NIST cybersecurity frameworks such as NIST SP 800-171 as they capture practices associated Governance, Strategy, the Business…
Down, but I’m not convinced out? I get the feeling that a bit like hydra, where one opportunity is cut-off another one takes it place. Does anyone know what happened to ‘Fancybear’ (APT28)? View Original Post
A very interesting read, the World Economic Forum (WEF) 2022 global risk report. As expected cyber is up there in the top risks with 2021 being a year for Ransomware up 435% on 2021 and a lack of skilled resources…
This is a balanced article on the regulation of digital assets and its benefits. Highlighting that regulation will come to the asset class from various sources. In this case the Financial Action Task Force (FATF), the global AML and Terrorist…
The unfortunate consequence of a cyber attack. As United Structures of America, a $100million turnover business employing 450 people files for bankruptcy following a cyber attack initiated in 2019. An example if one were needed of the impact of ransomware,…
An interesting read on the changing landscape of cyber incident response. As organisation in the US are increasing reaching for their external legal councel before the incident response team to manage an incident. The regulatory and legal implications of a…
