Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Today, Matt and Tom take a deep dive into the difference between a privacy breach and a ransomware attack.
Some of the issues we consider are:

• Why are privacy breaches different from ransomware attacks?
• What is an authenticated v. unauthenticated cyber-attack?
• Why would the SEC get involved?
• What are the internal controls need to prevent and detect a ransomware attack? How will they be audited?
• How can a material weakness in internal controls around ransomware lead to a financial restatement?
• What will the SEC look at from an enforcement angle?

Resources
Matt in Radical Compliance