Members of Congress have written to the Chair of the SEC raising their concerns over the SEC final cyber rule, specifically the 4 day incident reporting timeline. What interests one with the attention that incident reporting gets is that the…
With the SEC final cyber rule effective, what lens will be used to evaluate the SolarWinds cyber incident of 2021? The SEC final rule was not effective at the time, but the SEC has always required covered entities to oversight,…
This is a great paper, it captures the essence and impact on Directors and Officers Liability and insurance. ‘What is Next for the Risk of Cybersecurity-Related Litigation?’ The SEC final cyber rule effects corporate risk transfer, playing with the traditional…
A cyberattack on a UK defense contractor and the theft of sensitive physical security data is of concern. A cyber attack on the UK could be grounds to invoke NATO article 5, but who wants mutually assured destruction? Cyber attacks…
The cybersecurity industry and their clients are caught in a difficult place. Having to reduce operating costs in line with falling sales, at a time when the effect of cyber regulation is starting to kick in. Be that the SEC…
The long anticipated final cyber ruling for SEC covered registrants goes into effect tomorrow, the 5th of September 2023 with compliance reporting starting in December 2023, affecting U.S domestic and Foreign Private Issuers. The ruling transfers cyber risk into the…
It’s an interesting point that is made Ted Dziekanowski. The role of the CISO is an important one for many organizations, as the frequency, complexity and severity of impact of cyber attacks continues to rise. With cybersecurity increasingly being considered…
It was a pleasure to present to over 1,400 attendees of the U.S The Institute of Internal Auditors Inc. webinar ‘Preparing for new SEC Cyber Disclosure’ yesterday, with my co-presenter Rachel V. Rose, JD, MBA, hosted by Michael Downing. We…
The SEC cyber ruling opens the door to public companies and their Directors and Officers to potential regulatory probes and shareholder actions. As Directors, Officers and executives responsible for cybersecurity risk management are required disclose material cyber risk and material…
Rachel V. Rose, JD, MBA and I will be discussing the SEC final cyber rule in this free to attend The Institute of Internal Auditors Inc. event tomorrow. The rule is effective on the 5th September 2023, effecting both U.S…
