An interesting analogy, the recent crypto crash resonates with the Credit Derivatives crash. While the global impact is not the same, there are once again lessons to be learnt. Maybe the market regulators were right? If crypto are securities, they…
Last night the UK Attorney General Set out the UKs position on cybersecurity, international law and the need for a clear framework for cybersecurity, that make clear when state action is unlawful. Treating a cyber-attack the same as a physical…
Should Chief Compliance Offices (CCO) be held accountable for failures in corporate governance, that participate in Securities Law violations? Could the same apply to CISOs for failure to comply with cybersecurity and data protection violations? Ted Dziekanowski #cybersecuirty #securitiesandexchangecommission #securities…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
A really nice speech given by the Chair of the SEC, Gary Gensler to the North American Securities Administrators Association (NASAA) on investor protection in the digital age. Discussing investment bias in analytics, systemic risk concentration and crypto. Reinforcing some…
The increase in regulatory scrutiny of cybersecurity will require a closer working relationship between cybersecurity, regulatory compliance, risk management and legal. As global regulators such as the SEC and those in the European Union focus in on cybersecurity risk management,…
Last week marked a milestone in EU cybersecurity. With EU NIS 2.0 (EU Network and Information Security) and DORA (Digital Operations Resilience Act) moving forward to ratification by EU Parliament and Council members. The impact of either should not be…
The Chair of the SEC Gary Gensler this week reaffirmed his view that Crypto assets are securities, and should fall under the purview of the SEC. That has recently bolstered its crypto and cyber team. Ahead of U.S. regulators looking…
The SEC is growing its cybersecurity and crypto enforcement unit. One wonders if they are gearing up for closer oversight and assurance of both cyber and crypto. Adding 20 new positions to the Cyber Unit. With the two recent SEC…
Indian regulators are taking a descriptive approach to cyber incident reporting. Setting a window of 6 hours to report an incident from when it is detected and defining specific categories of cyber incident that should be reported. The new rules…
