US critical infrastructure cyberattack reporting rules inch closer to reality

March 28, 2024 at 09:38AM New cyber incident reporting rules for critical infrastructure closer to implementation after President Biden signed CIRCIA into law in March 2022. Organizations must report substantial cyber incidents within 72 hours, including ransom payments within 24 hours. The rule faces pushback from industry due to added compliance strain on resources, according … Read more

Executive Order on Port Cybersecurity Points to IT/OT Threat Posed by Chinese Cranes

February 21, 2024 at 09:45AM The Biden-Harris administration issued an executive order to enhance cybersecurity at US ports, specifically addressing the threat of Chinese-made cranes. The maritime industry has been prone to cyber incidents, leading to concerns about supply chain security and global economy. The order empowers the Coast Guard to enforce cybersecurity standards and … Read more

Biden will veto attempts to rip up SEC breach reporting rule

February 1, 2024 at 12:19PM The Biden administration strongly opposes Senate Joint Resolution 50 and House Joint Resolution 100 that seek to nullify the SEC’s strict data breach reporting rule. The administration argues that the SEC rule is vital for transparency and incentivizing corporate investment in cybersecurity. However, there is disagreement among lawmakers regarding the … Read more

What Do CISOs Have to Do to Meet New SEC Regulations?

December 18, 2023 at 06:11PM CISOs face increasing regulatory scrutiny amidst rising cyber threats. The SEC’s recent action against SolarWinds’ CISO signals heightened individual accountability. New reporting obligations for public firms compel CISOs to fortify security programs, potentially enhancing standing and investor appeal. However, clear guidelines from the SEC are beneficial, and adjusting operating procedures … Read more