Should Chief Compliance Offices (CCO) be held accountable for failures in corporate governance, that participate in Securities Law violations? Could the same apply to CISOs for failure to comply with cybersecurity and data protection violations? Ted Dziekanowski #cybersecuirty #securitiesandexchangecommission #securities…
A great summary of the latest feedback on the Securities and Exchanges Commissions Cybersecurity risk management proposal is informative. It shows a split between industry, investors and regulators on the proposed ruling, the depth of feeling on cyber incident reporting,…
A really nice speech given by the Chair of the SEC, Gary Gensler to the North American Securities Administrators Association (NASAA) on investor protection in the digital age. Discussing investment bias in analytics, systemic risk concentration and crypto. Reinforcing some…
Regulatory compliance in the U.S. especially in the areas of Sanctions, Cyber and Crypto is creating a compliance headache both for Federal agencies and their intended recipients. While Sanctions are not new, the convergence of AML, ESG, Cybersecurity and Crypto…
Ted Dziekanowski, an interesting read as EU NIS 2 moves forward. With the Securities and Exchange Commissions (SEC) proposals for cybersecurity risk management for firms with access to U.S. Capital markets and the US DoD DAFRS/ CMMC program that impacts…
Know your enemy and know yourself to build an effective defence. Cyber threat modelling along-side vulnerability assessment and a clear managed enterprise wide architecture are important components to cybersecurity risk management. However this is the challenge. The Securities and Exchange…
The Chair of the SEC Gary Gensler this week reaffirmed his view that Crypto assets are securities, and should fall under the purview of the SEC. That has recently bolstered its crypto and cyber team. Ahead of U.S. regulators looking…
The SEC is growing its cybersecurity and crypto enforcement unit. One wonders if they are gearing up for closer oversight and assurance of both cyber and crypto. Adding 20 new positions to the Cyber Unit. With the two recent SEC…
We presented a proposal to the DoD, Cyberspace Solarium Commission, NDIA and AICPA in 2021 to manage DFARS and CMMC compliance. We called it the Augusta Plan 1.0, or Augusta Plan 2.0 to enable CMMC, FISMA and OMB A130 compliance.…
I am looking forward to today’s conversation on the SECs cybersecurity proposal with the The Institute of Internal Auditors Inc. Ted Dziekanowski, the more you immerse yourself into the SECs proposal, the more you understand that the SECs requirements are…
