The recent reported challenges with data security and DoD Cloud, along with the release by the GOA of a cloud security audit, appear from the outside to have created concerns within the DoD over cloud security. While one hopes that…
U.S Federal government has had risk management in place for 20 years with FISMA, a risk based framework for the management of cybersecurity (information). FISMA unfortunately has had a patchy implementation with a poor record of compliance across Federal government.…
The SEC’s risk agenda takes another step forward considering a proposal to mandate climate-risk disclosures by public companies. Focusing on the material impact of climate change, recognizing that climate risks can pose significant financial risks to companies. Aiming to bring…
US congress and Federal agencies are moving quickly with various Federal cybersecurity legislation to secure critical national infrastructure and public and private sector organisations, require incident reporting, and the implementation of appropriate cybersecurity practices. The SEC last week proposed cybersecurity…
The German business unit of Denso reported a cyber attack last week. It is the second confirmed cyber incident of a supplier to Toyota in the past month. While there are no report of disruption to Toyota production, one suspects…
Yesterdays announcement by the SEC for mandatory cybersecurity disclosure will set the cyber risk management agenda for SEC covered entities, if passed. Not only does it propose mandatory ongoing disclosures by covered entities of their governance, risk management, and strategy with…
Reconnaissance is taking place on CNI as geopolitical tensions rise. In what has been reported by media outlets as attackers gained access several computers that belong to past and present employees of 21 energy companies, including Liquified Natural Gas (LNG).…
The European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines at the end of 2021. At a time when the US Federal government is also progressing legislation through Congress to address cybersecurity governance,…
Cyber insurance prices are up, coverage down and loss ratios rising. Cyber is a difficult risk to manage and innovation, economic growth, cyberspace and technology are not on the side of the underwriter and the insured. In our paper we…
The cyber incident that affected Toyota in Japan last week has highlighted the challenges for Japan’s manufacturers and their supply chains. The first is the fragility of JIT supply chains to impacts in product processing and delivery, the second is…
