Recently, AT&T issued a concise statement, spanning 183 words, acknowledging a data breach. The breach exposed 65 million records containing sensitive personal information. You can find the statement on AT&T’s website: AT&T Addresses Recent Data Set Released on the Dark Web (att.com). As a risk manager, two phrases caught my attention: “…it is not yet …
The Executive Order issued by the White House on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence marks a significant step towards establishing a robust framework for AI governance.¹ As a compliance expert, I recognize the critical importance of this directive in setting clear guidelines and expectations for the responsible development and …
OCC Interagency Guidance on Third-Party Risk Management Amidst government inefficiencies, it’s worth commending US banking regulators for their ongoing efforts to simplify and consolidate guidance and regulations related to third-party risk management. Earlier this year (June 2023) The Office of the Comptroller of the Currency (OCC) issued its final Interagency Guidance on Third-Party Relationships: Risk Management. …
The Securities and Exchange Commission (SEC) recently released a proposed rule that would require public companies to implement new cybersecurity risk management and disclosure measures.¹ The proposed SEC cybersecurity disclosure rules aim to modernize and standardize the SEC’s approach to cybersecurity risk management by updating and expanding its guidance to companies regarding their disclosure obligations and …