The SEC has appointed a new head of its cyber enforcement unit. The Unit, a specialized department that focuses on protecting investors and markets from cyber-related misconduct. Whilst not a new role, it emphasizes the SECs position in protecting investors…
I have enclosed a copy of the presentation I gave at 2 events on Operational Resilience over the past week. At Freshfields Bruckhaus Deringer and Price Waterhouse Cooper in the City of London. Operational resilience and cyber are high on…
It’s a fair point raised about the Disney compromise, and quite rightly I was picked up on credential stuffing as a vector last week. It raises a few questions on where does cyber testing sit within the Software Development Life…
Being prepared for the worst should be at the forefront of mind when you are a trusted high profile brand. Not having answers will not help. Less than a week after going live and people have been hacked using the…
Is it now officially game on for a cyber war. With US officials making it clear that they are under attack from China. We’re familiar with the tone that data, more specifically Intellectual Property, has been stolen by the Chinese…
Caveat emptor. The PE sector is in an interesting position when it comes to cyber security. It invests in new ventures and restructures mature businesses. It creates and distributes significant amounts of sensitive information and data on behalf of clients,…
They say that experience is a wonderful thing and of course, it is. There is evidence that security professionals who have gone through cyber incidents, learn from their experiences and apply that knowledge better than those who have not. Now…
It’s that time of year when we start to predict what cyber looks like next year. For 2020 the software industry figures will predict a sales CAGR of 10 – 15% and cyber insurance will probably do the same and…
Moody’s has for sometime voiced a concern of the impact of cyber risk management on the impact of corporate value. For credit rating agencies vulnerability and operational assessments form part of their assess criteria. Which for those not familiar with…
Being honest, open, transparent and sharing information with corporate peers about cyber security threats and incidents may deliver more benefits to companies than not. Regulators, government agencies and industry bodies would like companies to share more information on cyber issues,…
