article thumbnail

GUEST ESSAY: New SEC rules aim to help C-levels, board members quantify cyber risks

The Last Watchdog

Securities and Exchange Commission (SEC) is taking steps to crack down on insufficient cyber risk reporting. Related : Making third-party risk audits actionable. The new rules urge companies to build more robust cyber risk management programs. Disclosing policies and procedures for risk management.

article thumbnail

Upcoming Speaking Engagements

Schneier on Security

This is a current list of where and when I am scheduled to speak: I’m keynoting CIISec Live —an all-online event—September 15-16, 2021. I’m speaking at the fourth annual Managing Cyber Risk from the C-Suite conference—a virtual event conducted through Webex—on October 5, 2021. Details to come.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GUEST ESSAY: Why internal IT teams are ill-equipped to adequately address cyber risks

The Last Watchdog

Regular training sessions for all employees on cybersecurity best practices, potential threats, and the importance of compliance can help ensure that cybersecurity is a shared responsibility, contributing to a more robust defense against cyber threats and regulatory breaches.

article thumbnail

Navigating Third-Party Cyber Risks in Healthcare: Insights from Recent Events

Security Boulevard

Looking at billing services’ impact on healthcare organizations Last week’s blog talked about the events that nearly brought Change Healthcare’s services to a halt. This week, we’re going to look Read More The post Navigating Third-Party Cyber Risks in Healthcare: Insights from Recent Events appeared first on Axio.

article thumbnail

LW ROUNDTABLE: Wrist slap or cultural shift? SEC fines cyber firms for disclosure violations

The Last Watchdog

Unisys, for instance, was found to have framed cyber risks hypothetically even though its systems had already been breached, exfiltrating gigabytes of data. The key is to disclose information that helps stakeholders understand the company’s cybersecurity risk management without revealing sensitive operational details.

CISO 263
article thumbnail

Turbulence In Banking: Navigating the Cyber Risk

Security Boulevard

With recent events involving Silicon Valley Bank and Signature Bank fresh in our minds, investors and financial institutions both big and small are looking to reduce exposure and risk. The post Turbulence In Banking: Navigating the Cyber Risk appeared first on Security Boulevard.

article thumbnail

GUEST ESSAY: As cyber risks rise in 2020, as they surely will, don’t overlook physical security

The Last Watchdog

Physical security is the protection of personnel and IT infrastructure (such as hardware, software, and data) from physical actions and events that could cause severe damage to an organization. Related: The case for quantifying cyber risks The most important factor that should be taken into account is a security risk assessment.