Many are commenting on the SECs requirements to report material incidents in 4 days, or for CNI providers to report incidents to CISA in 3 days. US financial services regulators expect cyber incidents to be reported to their banking organization’s…
A good read from the World Economic Forum (WEF), discussing the Securities and Exchange Commissions (SEC) proposal for cybersecurity risk management, strategy, governance and incident disclosure. If the SECs proposal makes it to regulation, it is likely to have the…
Who will carry more weight across the Defense Industry Base, the DoD or the SEC? If the SEC proposal that focuses on cybersecurity risk management, strategy, governance and incident disclosure moves ahead. What will be the impact on DoD Primes,…
The challenge that many governments are now starting to acknowledge is that market forces alone have not worked in managing cybersecurity risk, especially when it comes to CNI. CNI accounts for most of our important industry sectors. Cybersecurity risk management…
A great read from Brian Krebs, that demonstrates the ingenuity of hackers and the complexity of cyber problem for the public and private sector. It underlines how complex cybersecurity risk management is, not just as a technology problem, but a…
I think cybersecurity risk management and ESG will converge under ESG. Cyber is a very significant risk for shareholders and US cybersecurity regulatory regimes are developing quickly. With a number of Federal legislation, regulation and enforcement programs underway and ESG…
