Cyber is not solely a CISO ‘problem’ to resolve and one does not believe there should be any conflict of interest between the CISO and GC. Cybersecurity ceased being solely a CISO problem when regulators introduced cybersecurity regulations such as…
A nice update from the World Economic Forum (WEF), following up on their approach to cyber risk resilience. Aligning with the regulatory approach proposed by U.S. and EU regulators for Cybersecurity Risk management. Regulations that set the requirements for Board…
A great read outlining cybersecurity litigation from recent cases, relating to U.S Federal contracts and contractors. Many will be aware of the Aerojet Rocketdyne and CHS cases, and Whistleblower actions. What is interesting is the increasing Bid Protest cases that…
Thank you Ted Dziekanowski. One could argue that its not 1 weeks interest on the fine purported in the court papers of $19Billion. But it along with the CHS False Claims action reported in March, starts to build a pool…
Indian regulators are taking a descriptive approach to cyber incident reporting. Setting a window of 6 hours to report an incident from when it is detected and defining specific categories of cyber incident that should be reported. The new rules…
Thank you Ted Dziekanowski, the DoJ settlement is an example of the challenges ahead for cybersecurity. The DoJ civil cyber fraud initiative and the enclosed settlement is an example of the regulatory enforcement that is being tested in the US.…
If you are a security professional then I strongly recommend you register and review the Law360 article on SolarWinds. A US judge has kept open an investor suit against the company, following allegations from SolarWinds investors that the software firm…
