A great overview of the violations the SEC alleges against SolarWinds. The charges levied against SolarWinds by the SEC are in response to what appears to be a blatant failure to remedy significant cybersecurity vulnerabilities and concealing risks from shareholders.…
An further example of the effectiveness of Government agency Whistleblower program. As the Commodities Futures Trading Commission (CTFC) issues its annual Whistleblower program to Congress for FY 2023. Whistleblower tips up 50 % (1530) on FY 2021 and 2022 combined,…
Is state intervention needed for cyber insurance?’, more importantly can the state afford to cover the potential liabilities? The recent Lloyds of London report highlighted the outcome of a possible system cyber attack. Landing on a $3.5trn figure for global…
Ted Dziekanowski it’s Halloween and reading the indictment against SolarWinds, it maybe time to bring out the dead. The quote of the day has to be, related to vulnerabilities identified in the Orion Platform, Even if we started to hire…
This is a very serious development for the cybersecurity community and one to watch. As the SEC charges SolarWinds and its CISO with defraud investors and internal control failures relating to the 2020 hack. The SEC alleges that the company…
Thank you International Security Journal (ISJ), it’s a pleasure to be published in this months International Security Journal, representing The Augusta Group (page 30). Discussing cybersecurity regulation and how it transfers cyber risk ‘Left of Bang’ into board rooms. Setting…
What does professionalism mean? As a Chartered Security professional holding a place on the UK register of Chartered Security Professionals, and an Assessor for those seeking to join the register it means allot. () It means that you have achieved…
A positive message from the Australian Government, requesting companies patch critical vulnerabilities. Ahead of an announcement of new cybersecurity strategy. Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix #paravasecuritysolutions #cybersecurity #cyberriskmanagement View Original Post
Thank you for posting Olaf Classen, a useful list of cybersecurity standards. The challenge for regulated entities is that these frameworks will not enable you to comply with U.S or EU cyber risk management regulations. EU NIS 2, DORA and…
Self attestation has never worked for cybersecurity risk management. The U.S DoD regulated cyber through DFARS self attestation under DFARS 252.204-7012, it led to failures in national security through IP theft. Capital market regulators have been raising concerns over cyber…
