The UK government has Royal assent for a new Procurement Act to support small business. With an aim of protecting national security. One hopes that it includes rules to ensure cybersecurity is addressed by small business delivering in to government…
One cannot over emphasis the importance of internal audit(IA) in cybersecurity oversight, assurance and attestation. That will be required by covered regulated entities and their boards. The role of IA across ESG is magnified when one considers the effects of…
A nice update on APT 28 and its focus on French critical infrastructure. Paddington bear got a face lift, tell me that this doesn’t look like Paddington having a bad (or good) day. Switching out the marmalade sandwiches for something…
Thank you Oliver F. Gosemann for pointing me towards the Heidrick & Struggles 2023 Board Monitor report. It provides an interesting perspective of board member cyber experience across several countries in the EU, Africa, North America, South America, Asia pacific…
The Dear CEO letter from Financial Conduct Authority in September 2023 to cyber insurers focusing on policy wordings, highlights the challenges insurers having in delivering cyber insurance policies and their own knowledge of cyber risk in the board room. How…
UKs new law on EV seems to miss out cybersecurity. When it’s EU and U.S partners expect cybersecurity risk management compliance. Ted Dziekanowski Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA #paravasecuritysolutions #cybersecurity #cyberriskmanagement #evsecurity View Original Post…
Regulated entities that cannot demonstrate cybersecurity risks management will find insurance harder to justify or claim. Regulation shifts risk Left of Bang on to the financial statements of covered entities. EU NIS 2, DORA and the SEC final rule require…
Cyber attacks on software security vendors rapidly become material, affecting its infrastructure and as a third party vendor, the security of its customers. For companies such as Okta, putting it in the cross hairs of clients, the SEC and EU…
Thank you for sharing Olaf Classen. One is not sure how concerned one should be about intrusions into CNI providers, least of all Energy. There is no doubt that they take place, and one suspects with a frequency that would…
Ted Dziekanowski, cyber attacks invariable lead to a drop in share price. The SEC final rule will lead to material incident reporting. Could it drive a vote in investor confidence. benefiting short sellers and activist shareholders. Brian D. McCarthy #paravasecuritysolutions…
