With note, Cyber risk overtakes financial risks as top concern for the worlds largest sovereign wealth fund. Im worried about cyber more than I am about markets,†Tangen (CEO) told the Financial Times. Were seeing many more attempts, more attacks…
Should cyber risk be a separate vertical alongside Credit, Market and Operational Risk. For financial institutions the trend has been to consolidate non-financial risks, including cyber, under a ‘non-financial risk’ function. To bring together and simplify the oversight and assurance…
A great example of how cyber awareness is permutating Federal agencies. Data has always been ‘back gold’, the most important asset for governments and organisations, as the DoD recognises. With the theft of DoD weapon system IP. Data creation, theft…
Shared responsibility model, common criteria and a harmonised approach to the security of information types through Cybersecurity Framework Profiles Ted Dziekanowski based upon data risk. #theaugustagroup View Original Post
Thanks for posting Ted Dziekanowski It seems that some U.S and EU regulators are taking a leaf out of the SEC book. Setting regulatory regimes that place the responsibility on boards to implement, assure and attest cybersecurity risk management compliance.…
A nice summary of SOC. A SOC assessment can be used to place a level of assurance over internal cyber controls ahead of regulatory attestation. As the article points out, they can be delivered through internationally recognised and accredited institutions…
NIST Cybersecurity Framework Profile (CSF) 2.0 gets underway with a well attended workshop this week, hosted by NIST. Providing an opportunity for the NIST community to come together and discuss the development of the CSF over the past 9 years…
Does the UK have a defensive cyber strategy? The U.S Federal Government is starting to come to terms with the need to secure critical national infrastructure and regulating for it. The EU is adopting EU NIS 2.0 and the Australians…
Ted Dziekanowski Setting common criteria for nation states to agree and authorize common regulatory, cyber and risk standards. That everyone can agree upon and operate across national boundaries. Following a method that has already been created and adopted by several…
Data and cybersecurity compliance is a National Security conversation. While the implementation of data security legislation such as GDPR is important for the protection of PII, alignment with international standards and partner nations is an important consideration for National Security.…
