Operational risk

Ben Schilz predicts movements towards a sovereign Europe, quantum-ready encryption, and a slow goodbye to Big Tech.

The Australian Prudential Regulation Authority (APRA) has announced that it will start a consultation process on targeted amendments to CPS 230 Operational Risk Management by the end of 2025.

Quantum is coming – but not everything you encrypt today will still matter tomorrow. Rik Ferguson explains where to focus and how to build cryptographic resilience that lasts.

David Honour looks at the hidden issues of relying on AI in risk assessment – and how to build guardrails that maintain the advantages but without the distortions that AI use can bring.

Artificial intelligence, as we know it, has a problem. Most large language models produce different answers to the same question, even under apparently identical conditions.

Mohammad Ismail says that businesses must stop regarding API security as simply a matter of discovery.

A new survey-based report by Salt Security has found that the majority of CISOs struggle when it comes to API security, with only 17% having a fully developed strategy in place.

CyberCube and Munich Re have published the key findings of a joint study on severe ‘cyber accumulation’ events and the relative resilience of organizations to systemic events due to effective mitigation measures.

On 17 July 2023, APRA released the final cross-industry Prudential Standard CPS 230 Operational Risk Management (CPS 230), with the deadline for compliance being 1 July…

Nearly three quarters of European IT and cybersecurity professionals say employees are already using generative AI at work, but just under a third (31%) of organizations have put formal policies in place to manage the risks in this area.