It’s hard to deploy cybersecurity for all companies, least of all SMEs. I recently looked at the average spend of the top 10 global Tier 1 banks and they all spend over $500 million a year on cyber each. Deploying…
If ESG reporting requirements continue to follow their current trajectory and don’t get derailed, then in all likelihood they will get rolled to the boardroom enforce and not just impact corporate America, but all publicly trades company on US markets.…
ESG reporting is a hot topic for the investment community. ESG reports provide the investment community with a corporate view of the material impact of ESG related risks to their balance sheet and the action the company is taking to…
Thanks for sharing Ted Dziekanowski, a useful summary of the status of ‘Environment’ reporting under ESG and the Securities and Exchange Act. But note the myths and importantly the cyber security disclosure statement. SEC Chairman Gary Gensler indicated recently that…
I posted many times about cybersecurity, regulation, oversight and assurance and the general failure of business to adopt appropriate cybersecurity practices. If the enclosed article is correct then ‘seller beware’. Giving the PCAOB and CFPB more authority may be a…
Following on from the release of the GAO report on the challenges cyber insurance policy holders face earlier this month. Whilst central to government policy Congressman Jim Langevin, a co-chair of the Cybersecurity Solarium Commission makes the point that during…
The US takes action against Russian following the recent cyber attacks. View Original Post
There are lessons to be learnt from managing legacy equipment. Mandiant identified the threat actor behind the cyberattack and data theft involving Accellions legacy File Transfer Appliance product. Which has been associated with the ransomware reported by Bombardier this week…
The European Commission presented a new Cybersecurity Strategy in December 2020. The Strategy has three pillars: 1. Resilience, technological sovereignty and leadership – Reforming the rules on the security of network and information systems. Creating a network of Security Operations…
The US builds a considerable team to work on cyber security. but one critic is that it is heavily biased toward public sector appointment with little commercial sector experience. Balancing public and private sector experience will be important to ensure…
