A great article that lays out some of the legal precedence of failing to comply with cybersecurity and the implications for boards that fail to address cybersecurity going forward. Remembering that we are at the start of the journey, not…
In 2022/ 2023 the U.S is funding $1.5 billion to cover 75,000 miles of highway with EV charging infrastructure through the National Electric Vehicle Infrastructure (NEVI) program. With $5billion being made available over 5 years. EV charging is Critical National…
The GAO report published on the 19th January sets out the requirement for a U.S National Cybersecurity strategy that one suspect will be addressed shortly. Looking at the deliverables for cybersecurity supply chain risk management of the 23 Federal Agencies…
A great article discussing the cyber insurance backstop. I have to agree with Daniel Woods, one believes that any cyber insurance backstop is premature. We wrote in January 2022 that cyber was an uninsurable risk, but that it could be…
Cyber requires both a whole of society and a whole of nations approach. I fear however that the problem is to big an elephant to be eaten in one sitting. We are seeing the first steps in the process through…
I’ve been fortunate to have been able to build a considerable amount of diversity into my career. Diversity including engineering, manufacturing, academic research, insurance and banking, with a common thread of risk and cybersecurity. I threw in a little experience…
Another domino falls. View Original Post
The regulatory agenda for cyber is forming quickly. The ONCD national cyber strategy is due in the coming weeks, the EU published NIS 2.0 and DORA, and is planning the Cyber Resilience Act (CRA). The DoJ, DoT and FTC have…
The ransomware market is complex and becoming more so. OFAC regulations make paying ransomware through the U.S and it citizens illegal. Insurer exclusion clauses and OFAC make cyber insurance coverage highly unlikely, other than to fix the incident, new cyber…
The volume of cyber incidents faced by T-Mobile is not insignificant and belays the complexity of the problem they face. Writing a report recently on U.S and EU Cyber regulations I was struck by the depth and breadth of oversight,…
