An interesting report on the state of the CISO market, primarily in the U.S. Stress and Burnout are still significant issues for CISOs. But changes are starting to take place as CISOs progress towards the board room, as regulation develops…
From earlier this year, Australia moves to implement its next round of cyber legislation. The enclosed article outlines some of the costs associated with the implementation and on going management of the associated risk management programs. ‘Home Affairs Secretary Mike…
Today the UK launched its Maritime security strategy. Cyber gets 53 mentions across the 116 pages. At a time when the EU has released NIS 2.0 that includes maritime as critical national infrastructure, the U.S. has passed cyber regulation to…
Over 90% of companies in most economies are made up by Small to Medium sized business. Companies that do not generate the revenues to be able to implement the range of cybersecurity protection and defenses required. By way of example…
An important read by Chris Inglis the White House National Cyber Director. As with Kinetic warfare highlighting the need to balance both ‘offensive’ and ‘defensive’ capabilities. Chris Inglis pointed out (sic) The only reasonable solution is to get serious about…
An observation from S&P about cyber insurance. Cyber insurance growth (and the likely reduction in loss ratios), is rated more to increases in premiums than volume take up. The article highlights the hesitancy of reinsurers to underwrite large cyber risks.…
FISMA has been around for 20 years and has been difficult for many Federal Agencies to adopt. Inspector general Audits are available that demonstrate the compliance of agencies by both Federal Inspector Generals and the GAO. In this case the…
The SEC proposal for cybersecurity risk management, governance, strategy and incident disclosure is getting air time and column inches. What surprises me is the conversations about the timeliness of incident disclosure and content shared with investors, which is important. But…
The Australian Council of Financial regulators has issued updated guidance for its Cyber Operational Resilience Intelligence-led Exercises framework. To aid preparation and execution of regulator led operational resilience testing of Australian Financial institutions. Ted Dziekanowski #cybersecurity #cyberresilience #cyberriskmanagement #regulation #theaugustagroup…
The UK Financial Reporting Council, the body that regulates UK auditors, accounts and actuaries raises concerns that UK firms are not taking digital security seriously enough. ‘There was general consensus that current disclosures are not sufficient to meet investor and…
