Call us now:
US congress and Federal agencies are moving quickly with various Federal cybersecurity legislation to secure critical national infrastructure and public and private sector organisations, require incident reporting, and the implementation of appropriate cybersecurity practices. The SEC last week proposed cybersecurity requirements for cybersecurity risk management, strategy, governance and incident disclosure by public companies. If successful it will be delivered through a range of filings. Requiring detailed reports of the cybersecurity maturity, ownership, management, board competence and incident response by firms listed on SEC covered markets.
The enclosed gives a great recent summary view of 8K filings made to the SEC by companies that include cyber incident losses and costs for ransomware. That will not only be the focus of the SEC but no doubt the Department of Justice (Cyber Civil Fraud initiative) and the Department of Treasury (Ransomware reporting under OFAC).
Jason Spezzano Ted Dziekanowski Brian McCarthy
#theaugustaplan #cybersecurity #cyberriskmanagement #regulatorycompliance #regulatoryoversight #cybercompliance #cyberregulation #cybergovernance #cyberriskgovernance #ransomeware #governance #nist #cscrm #scrm #fisma #riskmanagementframework
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6910492832591925248