New Preliminary Cybersecurity Framework Champions Risk Management

Cybersecurity

In February, President Obama issued an executive order instructing the Commerce Department to lead a task force of security experts and industry insiders to develop a voluntary framework to reduce cyberrisk. Last week, the National Institute of Standards and Technology officially released an initial draft of the cybersecurity framework and announced a 45-day open comment period for public input.

The full Preliminary Cybersecurity Framework can be viewed here on the NIST website. After the review period and subsequent revisions, a more complete version will be released in February.

Risk management is a primary focus of the new framework, from the language used to analyze potential exposure to express endorsements in the policy itself. According to a press release, “The Preliminary Framework outlines a set of steps that can be customized to various sectors and adapted by both large and small organizations while providing a consistent approach to cybersecurity. It offers a common language and mechanism for organizations to determine and describe their current cybersecurity posture, as well as their target state for cybersecurity. The framework will help them to identify and prioritize opportunities for improvement within the context of risk management and to assess progress toward their goals.”

Under Secretary of Commerce for Standards and Technology and NIST Director Patrick Gallagher, who was tasked with overseeing development of the framework, emphasized the risk management as a critical component of strengthening national infrastructure in line with the president’s executive order. “We want to turn today’s best practices into common practices, and better equip organizations to understand that good cybersecurity risk management is good business,” Gallagher said.

buy xifaxan online orthomich.com/img/blog/jpg/xifaxan.html no prescription pharmacy

“The framework will be a living document that allows for continuous improvement as technologies and threats evolve. Industry now has the opportunity to create a more secure world by taking ownership of the framework and including cyber risks in overall risk management strategies.

buy trazodone online orthomich.com/img/blog/jpg/trazodone.html no prescription pharmacy

The framework outlines key functions that should organize cybersecurity activities: Identify, Protect, Detect, Respond and Recover. These functions are designed to aid the risk manager in evaluating, communicating and fortifying against cyberrisks. The document even suggests itself as a potential opportunity for risk managers to seize the opportunity to get involved in proactive cyberrisk strategy. It reads, “The functions also align with existing methodologies for incident management, and can be used to help show the impact of investments in cybersecurity.”

Authors also added the following visual to highlight the critical role of risk management at every level of suggested implementation:

Risk Management in Cybersecurity Framework

In a blog post, the White House encouraged businesses to evaluate the initial framework and their current cyberrisk position, and to consider their cyber risk appetite in the form of a projected target state for cybersecurity.

The Cost of Workplace Bias

There are many costs associated with workplace harassment and discrimination—monetary, reputational and the morale of employees to name a few. In 2012, the U.S. Equal Employment Opportunity Commission (EEOC) reported filing 122 lawsuits including 86 individual suits, 26 multiple-victim suits (with fewer than 20 victims) and 10 systemic suits. The EEOC’s legal staff resolved 254 lawsuits for total monetary recovery of $44.2 million.

The agency added that it secured monetary and non-monetary benefits for more than 23,446 people through administrative enforcement. These methods include mediation, settlements, conciliation and withdrawals with benefits. The number of charges resolved through successful conciliation, the last step in the EEOC administrative process before litigation, increased by 18% over 2011.

Harassment & Discrimination: Do You Know the REAL Impact?
By The Network Inc., the leader in providing integrated ethics, risk and compliance solutions

Read more: http://www.tnwinc.com/solutions/discrimination-and-harassment/infographic-workplace-harassment-training/#ixzz2jDmSPiiH

Can Britney Spears Ward Off Piracy?

Britney Spears

Pirates remain a notable risk for businesses that involve maritime activities like shipping for supply or distribution. While it’s easy to dismiss the idea with images of wooden ships, gangplanks and a thoroughly unwashed Johnny Depp, the face of piracy has changed, but it has far from disappeared.

In the last decade, increased pirate activity out of war-torn Somalia have drawn considerable media attention, especially as hundreds of ships were attacked and dozens hijacked and their crews held hostage. Pirates earned an average of $4.87 million per ship in 2011, a huge financial toll for businesses that was only compounded by rising need for kidnap and random insurance for crews.

buy keflex online www.northwestmed.net/wp-content/uploads/2023/10/jpg/keflex.html no prescription pharmacy

Yet the Horn of Africa and the Suez Canal are not the most perilous seas. Australia’s News Limited reported, “Shipping industry figures show that the waters around Indonesia and the Malay Peninsula is the world’s hotspot for pirates.

buy xifaxan online www.northwestmed.net/wp-content/uploads/2023/10/jpg/xifaxan.html no prescription pharmacy

” The International Maritime Bureau found that Indonesia has experienced a more than 50% surge in pirate attacks in the first half of 2013. Of the 48 attacks reported, 43 involved pirates boarding vessels and assaulting the crew. West Africa has also grown as a hotspot, and the Control Risks RiskMap Maritime 2013 also highlighted high conflict potential at sea off South Korea, Nigeria, and Bangladesh.

RiskMap Maritime 2013Some experts are turning to more creative measures to ward off pirates, Time magazine reported this week. To deter pirates from approaching supertankers off the east coast of Africa, merchant navy officer Rachel Owens said ships have begun blasting the musical stylings of Britney Spears.

buy cellcept online www.northwestmed.net/wp-content/uploads/2023/10/jpg/cellcept.html no prescription pharmacy

“Her songs were chosen by the security team because they thought the pirates would hate them most,” Owens said. “These guys can’t stand Western culture or music, making Britney’s hits perfect.”

It’s a colorful approach to consider, especially as Hollywood turns a spotlight on mismanaged pirate attacks with the new Tom Hanks movie “Captain Phillips.” Let’s just not take it too far – as Steven Jones, of the Security Association for the Maritime Industry, told Time, “I’d imagine using Justin Bieber would be against the Geneva Convention.”

Climate Change Report Causes Alarm

New findings on climate change, establishing it as a manmade phenomenon, are garnering attention from the insurance industry, which recommends immediate action.

The Intergovernmental Panel on Climate Change’s (IPCC) newest report  “clarifies what businesses and investors already know, that climate change is happening now and human activity is the dominant reason why,” Mindy Lubber, president of CERES, a nonprofit organization that works with insurers and investors said recently on a conference call. “Climate change is disrupting all aspects of our global economy, including supply chains, commodity markets and the entire insurance industry, which is seeing exponentially large losses from extreme weather events.”

Lara Mowery, managing director, head of global property specialty practice with Guy Carpenter & Co., noted that the report should cause “significant concern” and impact how insurers and reinsurers shape their business going forward.

Insurers’ and reinsurers’ business plans “depend critically on understanding and assessing risk, which is likely to become even more challenging as weather variability increases,” she said. Identifying and understanding the causes and consequences of climate change is essential to “implementing workable risk management solutions.”

Global cat losses are increasing, she explained. In the 1980s, “the rolling 10-year annual average for the worldwide cat loss was less than $10 billion. In the last few years that average has jumped up to more than $50 billion average, based on that 10-year rolling time frame.” In addition, 2005, 2011 and 2012 represent the top three insured cat loss years on record, she noted.

Given the IPCC’s conclusion on flood, drought and changing weather patterns and evidence of this over the past 50 years, the industry needs to evaluate how these changes could impact future losses. As an example, she said, the most widespread hazard of global warming is coastal flooding. Impact of events such as Superstorm Sandy, which produced devastating storm surge, could have even worse consequences if sea levels continue to rise. “Insurers and reinsurers must continually assess the most up to date research and adjust their business plans according to increases in calculated loss.”

While this has meant more insurer capital is at risk, “that can’t be the only response, the only solution and the only answer. We can’t just keep putting more money in the path of what’s happening,” Mowery said.

She emphasized that the industry and insurance buyers can be taking steps now to address the risks.

A recent example of innovation in this area is the Metropolitan Transportation Authority’s (MTA) $200 million catastrophe bond that was issued in July, “the first of its kind to cover storm surge specifically,” she explained. The MTA commented in the aftermath of Sandy that their traditional avenues for insurance and reinsurance “constricted dramatically,” making it more difficult for them to obtain the kind of risk transfer they needed.

She also pointed out that “We can’t continue to let human and economic costs escalate. Building codes and standards and land use strategies are accepted adaptation measures to improve resilience against flood, wind and fire impacts that may worsen under global warming.”