Cyber Risk Management

Untitled design-19
News & Events

The Ransomware Tattletale

In July 2023, the SEC released its rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure. This rule requires publicly traded companies to report cyber breaches within four days of...

Untitled design-18
Policy Explainer

A Full House: China’s Home-Grown Cyber Threat Research Powerhouse

If cybersecurity were a poker game, China has revealed a game-changing hand with its recently rolled out Regulation on the Management of Network Product Security Vulnerabilities (RMSV). This relatively new law ...

materiality
Policy Explainer

Determining Materiality of Cyber Events: A Guide for the New SEC Cybersecurity Disclosure Rule

Risk managers at public companies have always needed a process for determining materiality as it pertains to their shareholders. A factory being wiped out in a hurricane or a union strike is information that co...

Untitled design-16
Platforms & Solutions

Everything You Need to Know About Penetration Testing

In today’s digital landscape, where cyber threats are becoming increasingly sophisticated and prevalent, safeguarding your network has never been more crucial. One of the most effective ways to further th...

sec
Policy Explainer

SEC Pushes Ahead with New Cyber Rules

At the tail end of July, the SEC finalized a proposed rule requiring incident and other disclosures. The new rule is already facing significant industry backlash with even the Chamber of Commerce slamming the r...

ddos
Primers

Not Just a Nuisance: DDoS Explainer

DDoS attacks (Distributed Denial of Services) occupy a unique space within the realm of cybercrime. They seldom lead to costly GDPR violation fines, typically don’t involve data theft, and rarely, if ever...

geopol
Primers

On the Chess Board: Geopolitics and Cybersecurity

While the vast majority of cyberattacks are criminal activity rather than state-affiliated operations, these kinds of attacks are still incredibly important to understand and prepare for, should they come to yo...

August Newsletter
Monthly Newsletter

Consortium Networks Monthly Newsletter: August

This month’s edition of the Consortium Networks Monthly Newsletter is a huge policy roundup! Our semi-annual Washington Watch is out along with an overview of the current state of data privacy regulation ...

insider threat
Primers

The Call From Inside the House: Understanding and Preventing Insider Threat

Insider threats pose significant risks to organizations of all sizes but are unfortunately often overlooked or misunderstood by security teams. These threats come from individuals with access to an organization...

storm
Malware Spotlight

The Eye of the Storm: Malware in Focus

In June 2023, a Federal Civilian Executive Branch (FCEB) agency in the United States uncovered unusual email behavior, subsequently revealing a fresh espionage campaign connected to China. A month later, on Jul...