There are two market dynamics that relate to cybersecurity risk management and publicly traded organizations. The first is that the share price of public firms drops when they announce an initial cyber attack. The past 4 months (since the announcement…
Cybersecurity risk management has been a continual challenge for the Internal Audit Community. I have presented many times over the past 2 years on the challenges internal audit face with cybersecurity, cybersecurity risk management and cyber regulation for the The…
We seem to lurch from incident to incident. The current Zero day effecting CISCO routers is a further example of a threat effects many companies, requiring a patch. Incidents that effect the public and private sector alike, CNI, FIs and…
Such surveys are intersecting for what they say and what they do not say. Only 34% of S&P 500 companies have a cyber expert on the board, 46% allocate cyber oversight to internal audit and 33% of directors think that…
One wonders if Zurich has considered doing the same for cyber insurance and cyber risk management. The CEO rightly (in ones opinion) stated that cyber is currently an uninsurable(economically) risk in 2022. One has seen no solutions put forward by…
Olaf Classen one wonders how Munich Re factors considers the recent Lloyds of London announcement of costs of a catastrophic cyber attack, the CEO of Zurich stating that he believes cyber is an uninsurable risk and the recent announcements by…
Cybersecurity of small business is the 99% problem that no one seems to have found an answer to. The article says that cyber insurance is ‘not a comprehensive solution to all cybersecurity challenges’. Cyber insurance is not a solution to…
Lloyds is facing some challenges, on one side it’s dealing with the full extent of climate change, with $100bn of losses from natural catastrophes yet to make their way thorough the system to insurers. On the other it recently announced…
Today we should not be in a position where DDoS is a valid threat vector. Words like assault belay the reality that many firms still do not take cybersecurity seriously and use ‘complex’ or ‘assault’ to hid the fact that…
It’s a cautionary tail, if you’re a security firm, it’s often the case that you should try your best not to be seen or heard. If you’re a security software vendor its a good idea to secure yourself and your…
