Call us now:
Thank you for posting Bob Carver, CISM, CISSP, MS âœ. They say that dog food can taste quite nice, but one has to admit I’ve never been tempted to give it a go. But as the cyber regulatory agenda roles on, I’m waiting to see how ICT vendors are going to fair eating their own dog food.
EU and U.S cyber regulation has a very significant effect on the whole cyber supply chain. Effecting the boards and accountable executives of CNI providers, Financial Institutions, Capital Market registrants and ICT vendors. As regulation is setting legal and compliance obligations, that will make the cyber question one of ‘how will this help me comply, or, how do I justify this decision if I’m asked by the regulator, or would a reasonable investor consider this a material risk or material incident’?
When one evaluates EU NIS 2 or DORA (that dwarf the SEC ruling in scope), ICT vendors that include MSPs and cloud vendors are a specific class in scope, and on the hook to comply to cyber risk. One hope that with all the tools available, that include AI, they are prepared to demonstrate their management of cyber risk. As the Securities and Exchange Commission (SEC) eats its own dog food, one expects everyone on U.S Capital markets is going to have to give it a try. NIS 2 and DORA are a little more rigorous than the SEC ruling and specifically focus on ICT vendors and supply chain risk. Customers and suppliers will have to demonstrate cyber risk management compliance. Ted Dziekanowski will AI address the shared responsibility model today?
Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7115252579755794433