This is an important read to gauge the sentiment of security within Financial Services. As the CISO of JP Morgan pens an open letter to its suppliers warning of his expectations for their management of security risk.The letter highlights JPMs…
Bring back wind-up and quartz watches, all is forgiven. Maybe not a big of a problem as Crowdstrike, but it hurts the brand all the same.@Thaddeus Dziekanowski Brian D. McCarthyVeritas GRC#cybersecurity #resilience #sdlc View Original Post
Thanks for sharing Olaf Classen. A Crowdstrike update is bricking Windows machines globally. ‘We’re seeing BSOD Org wide that are being caused by csagent.sys, and it’s taking down critical services’ If correct, one wonders the origin of the code in…
I started my career as an aerospace engineer and relate to the passion, commitment and will to deliver to the highest safety standards warranted by the aerospace industry. One reads across from this article to cybersecurity and the need to…
A great example of why the management of the Software Development Life Cycle (SDLC) and third party supplier risk management are critical to the digital lives we lead. What a ideal tool to compromise, free, widely used to compress data…
Cyber attacks are pealing back the underlying code used by software vendors, exposing source code and SDLC risks. Risks that transpose into third party supplier risks for customers and potentially material risks for shareholders. In the case of Ivanti, it…
A further example whereby accountability and responsibility for cybersecurity is being ‘lifted up’ to senior executives. As U.S Federal Government, in the form of CISA, continues to move ahead in placing greater accountability and responsibility on the boards of software…
One has long discussed cyber regulation in the U.S and EU and its effects. The enclosed is further example of the effects of cybersecurity regulation, as it relate to the supply of products that contain software to U.S federal Agencies.…
Supply chain cyber. One wonders what happened to secure by design in the SDLC Ted Dziekanowski. #sdlc #cybersecurity #cyberriskmanagement View Original Post
Thank you Bryan Foss. The importance of risk based testing in the SDLC should not be underestimated. The U.S is moving to regulate the SDLC, requiring organization that provide products to Federal Agencies declare their software BoM. The EU and…
