Cybercrime and national critical infrastructure responsibilities are key concerns for retail energy sector compliance. Resilience is vital for companies that keep the lights on and power financial institutions and hospitals.
Cybersecurity
U.K. Cyber Security and Resilience bill set to regulate critical infrastructure suppliers
Suppliers to the U.K. critical infrastructure will face new regulations to ensure they are protected from cyberattacks. The Cyber Security and Resilience Bill, introduced on November 12, also raises penalties for breaches and expands regulator powers to label certain suppliers as critical.
FCC rolls back Biden-era cybersecurity requirements for telecoms
Telecommunication companies are now on the honor system to protect their networks from cyber attacks, following a Federal Communications Commission (FCC) vote that removed requirements that they harden their networks.
OFAC sanctions Russian web company that hosted LockBit ransomware
Two Russian web-hosting services that provide cover for ransomware operators, including Lockbit, have been sanctioned by the U.S. Treasury’s OFAC and international partners.
NYDFS rolls out new guidance for firms about cybersecurity and third-parties
The New York State Department of Financial Services (NYDFS) wants financial firms to step up their game when it comes to third parties and cybersecurity.
Retailers face new compliance pressures from tariffs, sanctions, fraud and cybercrime
Regulators are pressuring retail compliance teams on supply chains, shifting sanctions and tariffs, sustainability, and digital commerce. Rising cyberattacks heighten data security concerns, while large retailers push legal and commercial requirements down their supply chains.
Navigating top risks in the insurance industry
Cyber threats, climate-related catastrophes, and disruptive technologies remain top risks reshaping the U.S. insurance industry. The question is how chief risk officers at the nation’s largest insurers are confronting them.
Ransomware gang BlackSuit hit with major takedown after targeting 450 U.S. victims
The BlackSuit ransomware organization has taken a major hit under a U.S.-led, global law enforcement operation that seized the criminal group’s servers and assets, the Department of Justice said Monday.
TPRM programs can prove their worth by limiting damage of cyberattacks, data breaches
There are stories we tell ourselves in third-party risk management (TPRM) to make ourselves feel better about the corners we cut.
Communication and relationships is increasingly critical for compliance teams
Compliance is increasingly in the spotlight as companies are tackling everything from artificial intelligence and other new technologies to risk management and mitigation. But it’s soft skills of communication and relationship building that are becoming the most critical tools for success.


