Governance, Risk and Compliance

CyberScoop reports that various industry leaders will be asked by the Cybersecurity and Infrastructure Security Agency "in the next couple of days" to advise on cybersecurity incident reporting's regulatory structure.

Venable’s Zach Martin, author of the Health-ISAC white paper on zero trust in healthcare, shares challenges to shifting into a least privilege security model and the need for better access control policies.

Proposals ratcheting up cybersecurity requirements for institutions under the New York Department of Financial Services may indicate additional regulations for U.S. banks.

Facing increased breaches on its systems and among its members, the Securities and Exchange Commission (SEC) is considering how it will better handle cyber threats.

CyberScoop reports that former National Security Agency employees Ryan Adams, Marc Baier, and Daniel Gericke have been prohibited by the U.S. State Department from taking part in International Traffic in Arms Regulations activities after being involved with the United Arab Emirates' vast surveillance operation on U.S. companies, as well as politicians, journalists, and dissidents in the UAE.

Among the workforce programs introduced by ISC(2) on Thursday was a process to train one million people through its entry level program for free.

Calls for more scrutiny and transparency grow louder as losses mount from attacks on decentralized finance (DeFi) cryptocurrency platforms.