Astaara has an experienced team and an established set of products which help our clients understand their cyber posture against a number of standards and frameworks (CE+, NIST, CAF, CIS etc). We support our clients on their journey through compliance and ultimately to effective and efficient cyber risk management.
The Guernsey Financial Services Commission issued specific guidance on 5th February 2021: Guernsey Financial Services Commission Cyber Security Rules, 2021
The rules came into operation in February, however transitional arrangements allow firms to implement changes to their internal controls to ensure compliance by 9 August 2021. Rules and guidance can be found here.
Under the new rules, all licensees must:
Cyber security is not just an IT problem; information security is different from information technology. It is a systemic risk potentially affecting the whole business.
Failure to act will be expensive. Being able to evidence you take cyber seriously is your best defence.
Contact us for a no obligation discussion about your requirements.
Astaara is experienced in providing risk management solutions for businesses of any size. You want a specialist where specialisation is needed; you do not want to be baffled with IT and cyber jargon. We speak your language.
We have two services for the financial services industry.
CyberStaart will include:
Our Benchmarking offering includes all of the above plus:
Cyber Essentials Plus, a government scheme widely promoted within the industry is a good start. But the GFSC requirements go further: you will need to demonstrate the measures you have adopted across all 5 of the cyber risk management themes: identify, protect, detect, respond and recover.
It is good practice for organisations to nominate someone at board level to be responsible for managing the company’s cyber security risks. In small and medium sized businesses, this responsibility can be found in a number of portfolios, including finance, legal, compliance, and IT.
A Chief Information Security Officer is not the same as Head of IT. It is a specialist role that impacts all areas of the business. The CISO should be independent of IT, providing assurance to the board that IT is doing what is necessary to identify and manage technology risk. Giving the role to the individual in charge of IT usually creates a conflict of interest.
In most cases, individuals with CISO responsibilities who are not in the IT function will not have the right experience or background to perform the role effectively. They will rely on the IT function and therefore be conflicted. This may prevent the CISO effectively discharging their function as the independent voice of risk management at board level.
A CISO is a key element of modern Enterprise Risk Management (ERM). Through our VCISO service, Astaara can support your CISO at a fraction of the cost of employing an additional FTE. We can help them prepare for board meetings pertinent to cyber, help them identify compliance gaps, and generate the evidence that you are complying with the new regulations. Our VCISO service also gives you access to multiple points of expertise, depending on your needs.
Office Address
4th floor, 2 Cornet Street, St. Peter Port, Guernsey GY1 1BZOops! We could not locate your form.
