Cyber Risk GmbH provides specialized cybersecurity, compliance, and risk management training. Their services include online training, in-house training, and cybersecurity assessments self-described to enhance awareness and address potential threats.

Cyber Risk GmbH

Cyber Risk GmbH | 683 followers on LinkedIn. We help organizations increase their level of expertise and knowledge against cyber threats. | Cyber Risk GmbH has been established in Horgen, Switzerland, by George Lekatis, a well-known expert in risk management and compliance.

Registered address: Dammstrasse 16, 8810 Horgen, Switzerland.
Company number: CHE-244.099.341.

Cyber Risk Reduction® Specialist & Founder

David C. Brown, PMP, CISSP, CEH, CISM

General Manager, Compliance LLC (USA) and Cyber Risk GmbH (Switzerland).

George Lekatis

Social Engineering Security Specialist, Open-Source Intelligence Analyst, BlackHat Trainer, Keynote Speaker

Christina Lekati

Co-Founder / COO at The Cyber Risk Company

Steve Seider

Announcing Updates to the Digital Operational Resilience Act Trained Professional (DORATPro) Program We are pleased to remind you of recent updates to the Digital Operational Resilience Act Trained Professional (DORATPro) program. In response to evolving regulatory guidance, we have expanded the program to include 366 additional slides that cover Commission Delegated Regulations (EU) 2024/1502, 2024/1505, 2024/1772, 2024/1773, and 2024/1774 supplementing DORA. There are no exam questions from this part of the program (Commission Delegated Regulations). If you have previously purchased the DORATPro program, we would be delighted to provide you with the updated version at no additional cost. Simply send an email with the subject line “Please send me the updated DORATPro program,” and include the name and email address of the individual or organization that originally purchased the program. We will ensure you receive the updated program within 48 hours (on business days). Please remember to check your spam or junk folders too. To find more: https://lnkd.in/d2Mfq-KN

Announcing Updates to the NIS 2 Directive Trained Professional (NIS2DTP) Program We are pleased to inform you of recent updates to the NIS 2 Directive Trained Professional (NIS2DTP) program. In response to evolving regulatory guidance, we have expanded the program to include 223 new slides detailing the Commission Implementing Regulation (EU) 2024/2690 of 17 October 2024, which provides comprehensive rules for the application of the NIS 2 Directive. Please note that there are no exam questions linked to this material (Commission Implementing Regulation (EU) 2024/2690). If you have previously purchased the NIS2DTP program, we would be delighted to provide you with the updated version at no additional cost. Simply send an email with the subject line “Please send me the updated NIS2DTP program,” and include the name and email address of the individual or organization that originally purchased the program. We will ensure you receive the updated program within 48 hours (on business days). Please remember to check your spam or junk folders too. To find more: https://lnkd.in/dPZEVBda

7 November 2024: NIS 2 Update - Commission Implementing Regulation (EU) 2024/2690 of 17 October is published at the Official Journal of the European Union Full name: COMMISSION IMPLEMENTING REGULATION (EU) 2024/2690 of 17 October 2024 laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures and further specification of the cases in which an incident is considered to be significant with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers. According to Article 1 (Subject matter), this Regulation, with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers (the relevant entities) lays down the technical and the methodological requirements of the measures referred to in Article 21(2) of Directive (EU) 2022/2555 and further specifies the cases in which an incident shall be considered to be significant as referred to in Article 23(3) of Directive (EU) 2022/2555. According to Article 16 (Entry into force and application), this Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union. More information at: https://lnkd.in/dwtebpF8

You must read the excellent “National Cyber Threat Assessment 2025-2026”, from the Canadian Centre for Cyber Security (PDF, 4.22 MB). You may visit: https://lnkd.in/eaqHwKpQ

Welcome to the October 2024 edition of our newsletter (6.22 MB, 94 pages), sharing the latest news, advancements, and opportunities from Cyber Risk GmbH (CHE-244.099.341). Explore this month’s release for essential updates in cyber risk and compliance management. October 2024 Newsletter Highlights. 1. Cyber Law and International Security. • The Cyber Law Toolkit: A web-based resource for legal professionals at the intersection of international law and cyber operations. • Cyber Espionage Scenarios: Insights from Scenario 02, covering cyber espionage against government departments. • ‘Big Ideas Lab’ Podcast: LLNL examines strategic deterrence in national security. 2. Artificial Intelligence. • OECD–FSB Roundtable on AI in Finance: Key takeaways on the impacts and risks of AI in the financial sector. • Teaching AI Ethical Boundaries: A look into AI programming that encodes obligations and permissions into logical languages. 3. Cybersecurity Threats and Landscape. • ENISA Threat Landscape 2024: Comprehensive overview of emerging cybersecurity threats. • Operational Technology Cybersecurity Principles: Australian Cyber Security Centre’s guidelines for securing OT environments. • Cybersecurity in Railways: Key presentations from the 4th ERA-ENISA Conference. 4. Data Protection and Compliance. • Common European Data Spaces: EU’s strategy for creating shared data environments. • EFPIA Position on EHDS Regulation: The European pharmaceutical industry’s stance on opt-out clauses in health data spaces. 5. Cryptocurrency and Financial Integrity. • Fraud and Manipulation in Cryptocurrency: First-ever criminal charges for market manipulation in cryptocurrency. • Cryptocurrency Fraud in Maryland: FBI’s guidance on identifying and reporting crypto investment fraud. 6. Government Initiatives and International Collaboration. • Pact for the Future: Recent commitments from the United Nations to promote global cooperation. • Joint Cybercrime Operation: Europol and Ameripol’s collaborative efforts against cybercrime in Spain and Latin America. 7. Scientific and Technological Advances. • Quantum Entanglement at CERN: New discoveries from LHC experiments at the highest energy levels. • Generative AI in Content Creation: Meta Movie Gen and YouTube’s AI advancements for creators. 8. Awareness and Public Resources. • Cybersecurity Awareness Month: Deputy National Cyber Director celebrates opportunities in cybersecurity. • Wall of Spies Experience: A unique display of America’s espionage history and counterintelligence. Our newsletter: https://lnkd.in/dRQXY8aG

17 October 2024: The Commission adopted the first implementing regulation on NIS 2 Directive. The implementing regulation will apply to specific categories of companies providing digital services, such as cloud computing service providers, data centre service providers, online marketplaces, online search engines and social networking platforms, to name a few. For each category of service providers, the implementing act also specifies when an incident is considered significant. The full name is: COMMISSION IMPLEMENTING REGULATION (EU) of 17.10.2024 laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures and further specification of the cases in which an incident is considered to be significant with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers. Next Steps: The implementing regulation will be published in the Official Journal in due course and enter into force 20 days thereafter. https://lnkd.in/eRRwjhZb

DORA developments. 15 October 2024 - ESAs respond to the European Commission’s rejection of technical standards under the Digital Operational Resilience Act. The European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) issued an Opinion on the European Commission’s (EC) rejection of the draft Implementing Technical Standards (ITS) on the registers of information under the Digital Operational Resilience Act (DORA). The ESAs raise concerns over the impacts and practicalities of the proposed EC changes to the draft ITS on the registers of information in relation to financial entities’ contractual arrangements with ICT third-party service providers. https://lnkd.in/dFaspt9f The European Commission’s rejection of technical standards under the Digital Operational Resilience Act: "The Commission considers it necessary to take a more proportionate approach to the drafting of the ITS, in particular with regard to requirements relating to legal identifiers for ICT third-party service providers. Against this background, we reject the draft ITS on mainly one specific aspect of the proposed Implementing Regulation, namely the mandatory use of LEI for ICT third-party service providers under Article 3(5) and (6) of the draft ITS. The Commission considers that it is necessary to give these companies a choice between the LEI and the European Unique Identifier (EUID), as for the majority of EU companies this EU identifier is already attributed free of charge." https://lnkd.in/ewj-NEkq

17 October 2024: NIS 2 Directive Deadline for EU Member States. Under Article 41 (Transposition) of the NIS 2 Directive, by 17 October 2024, all EU Member States are required to adopt and publish the national measures necessary to ensure compliance with the directive. These measures are critical for aligning national legislation with the enhanced cybersecurity requirements introduced by NIS 2. Following the adoption, these measures must be enforced starting from 18 October 2024, marking the beginning of a new era in cybersecurity across the EU. Many Member States have faced delays in transposing the directive into national law. This has raised concerns about the uniform implementation of the directive’s provisions and the readiness of essential and important sectors to comply with enhanced cybersecurity requirements.

10 October 2024 - The Council adopted the European Cyber Resilience Act (CRA). The European Cyber Resilience Act is a legal framework that describes the cybersecurity requirements for hardware and software products with digital elements placed on the market of the European Union. Manufactures are now obliged to take security seriously throughout a product’s life cycle. Digital hardware and software products constitute one of the main avenues for successful cyberattacks. In a connected environment, a cybersecurity incident in one product can affect an entire organisation or a whole supply chain, often propagating across the borders of the internal market within a matter of minutes. Next step: The act will be signed by the presidents of the Council and of the European Parliament, and will be published in the EU’s official journal in the coming weeks. The new regulation will enter into force twenty days after this publication and will apply 36 months after its entry into force with some provisions to apply at an earlier stage. Examples of products with digital elements. End devices - laptops - smartphones - sensors and cameras - smart robots - smart cards - smart meters - mobile devices - smart speakers - routers - switches - industrial control systems. Software - firmware - operating systems - mobile apps - desktop applications - video games Components (both hardware as well as software) - computer processing units - video cards - software libraries Examples of cyberattacks, exploiting the security of products with digital elements - The Pegasus spyware, which exploited vulnerabilities in mobile phones. - The WannaCry ransomware, which exploited a Windows vulnerability that affected computers across 150 countries. - The Kaseya VSA supply chain attack, which used network administration software to attack over 1000 companies. We closely follow and assess ongoing developments at: https://lnkd.in/gMse7hNj

CYBE

COM:CYBER-RISK-GMBH

Cyber Risk GmbH

name

homepage url

country

linkedin url

sector

industry

Description

competitor of

Metrics