Many have commented on the SEC final ruling and will continue to unwind the regulation. One has read the ruling many times and as someone who has interpreted and delivered many cyber, risk and information security regulations over the years.…
One am looking forward to discussing the SECs final cyber ruling with Shawna Flanders CRISC, CISA, CISM, SSGB, SSBB and Rachel V. Rose, JD, MBA on the 31st August. As the SEC final ruling on cyber is unpacked, there are…
A nice update on disclosure requirements of the SEC final cyber ruling. While many have focused on the cyber incident reporting, in ones opinion its the cybersecurity risk reporting that is the real issue, as discussed and required in the…
The Securities and Exchange Commissions (SEC) final ruling takes a little reading. In ones opinion created a balanced and well thought through regulation, addressing the concerns raised by the original proposal with the need to protect investors and markets. From…
The SEC demonstrates the use of its Whistleblower program with a $104 million payout to seven whistleblowers. One should remember that the Whistblower program is an effective tool used by Federal Agencies to oversight Federal suppliers. One wonders the effects…
Ted Dziekanowski Materiality, Adequacy and Reasonable are the words that are important with the SEC final ruling. They are words that are both objective and subjective, as far as the SEC ruling. Objective in terms of having regulatory definitions, and…
Thank you for posting Ted Dziekanowski. This ruling is not about incident management, that accounts for less than 10% or what the SEC seeks to achieve. The SEC final ruling is broader in its scope and application than the original…
Thank you for posting Olaf Classen. Now here is an interesting question for companies in the U.S, Germany and Great Britain that are domestic and Foreign Issuers on U.S capital markets covered by the SEC, given last weeks announcement by…
Thank you Olaf Classen. See my previous post on Ivanti. When the ruling becomes effective, Citrix would be required to consider the material effect of the identified vulnerabilities and decide if it has to be reported to the SEC. Remembering…
Boards of U.S listed companies have to oversight, assure and attest material risks, irrespective of the SEC Final ruling on cyber for many years. Cyber has always been a material risk, tested to a lesser degree under SoX since 2002.…
