Everyone has a new approach to governance, risk and compliance when they don’t comply to the models and frameworks that are already demonstrated to work. Governance theory is easy, its governance practice that’s hard. Getting boards to understand and manage…
Ted Dziekanowski This article is well worth reading, it supports our arguments that insurers need to rethink their approach to cyber insurance, and the cyber insurance industry faces challenges that one is not convinced it has yet found solutions to.…
A great article focusing on the challenges that the Uber CISO currently faces in court following its 2016 hack, and the companies approach to resolving the problem. It’s not the first time a CISO has found themselves in court, but…
An interesting report on the impact of cyber, and ransomware payments for the re-insurance industry. I would argue that the insurance industry has the opportunity and a necessity to play a pivotal role in cybersecurity risk management. To benefit both…
Thanks for sharing Ted Dziekanowski. It helps shed some light on the increased oversight and enforcement by the SEC on covered entities. It is of no surprise that I am interested in the approach that the SEC may take on…
The fall of crypto has had a knock on impact as exchanges lay off staff and cut back their operations. At a time when global regulators such as the SEC are starting to examine how crypto and exchanges should be…
A great read outlining cybersecurity litigation from recent cases, relating to U.S Federal contracts and contractors. Many will be aware of the Aerojet Rocketdyne and CHS cases, and Whistleblower actions. What is interesting is the increasing Bid Protest cases that…
The World Economic Forum recently released a cyber resilience white paper, that helps bring together the requirements from several U.S and EU cybersecurity risk management regulations and regulatory proposals. It establish a framework and process for creating cybersecurity resilience. Figure…
Along with existing and proposed cybersecurity regulations comes the requirement to ensure that staff are trained appropriately. That ranges from the shop floor to the board room. A requirement of the SECs cybersecurity risk management proposal is for boards to…
The impending wave of cyber regulation coming from US, EU and APAC regulators maybe good for the insurance industry. For one it sets the standards and expectation for cybersecurity risk management and secondly it means the insurance industry does not…
