The deadline is looming for banks and financial institutions that do business in New York to comply with new regulation that requires them to keep an audit trail of financial transactions for at least five years. Provisions of the Cybersecurity Regulation, which was passed in March 2017, will go into Read More
An angry Tesla employee tried to damage the company by inserting bad code into the electric car company’s manufacturing system and illegally exporting data to third parties. The case serves as a reminder to the damage that rogue employees can do and the need for internal controls to prevent such Read More
A new study from Deloitte indicates that it might be time to audit the crisis management plan. The study based on responses of 523 senior executives involved in risk, crisis management, and business continuity finds just 17 percent say their organizations have tested their crisis response plans. That’s way to Read More
A new survey finds that corporate boards are expected to ask IT, IT audit, and other functions responsible for securing the company’s data and systems for more information on the effectiveness of cybersecurity programs. The survey, by Deloitte, found that 62.7 percent of C-suite and other executives expect board directors’ Read More
Due to a bug discovered during an internal audit, social media company Twitter is recommending users change their passwords. An audit found that passwords were being stored in plaintext before an encryption process took place to secure the passwords on internal files. The company has fixed the bug, but is Read More
New survey results from the Ponemon Institute are likely to send shivers down the spines of IT auditors, cybersecurity professionals, and risk managers. The alarming results say companies are losing the battle to protect digital assets and intellectual property from hackers and online thieves. Here’s the lowlights: A whopping 82 Read More
According to a new survey conducted by the National Association of Corporate Directors, board members say they are not getting enough information from corporate functions, including internal audit, on such issues as cyber-risk, corporate culture, and strategic risks. According to the survey, it was rare for a director to get Read More
