Call us now:
The UK has been feigning the ownership and management of cybersecurity risk management policy, regulation, oversight and assurance for many years. Its sat between DSIT, NCSC and the MoD, with no clear accountability and ownership.
The US faced the same issues, hence the reason for putting cyber under the White House, through the Office of the National Cyber Director, The White House. That’s faced challenges in coordinating cybersecurity risk management policy, regulation and delivery. With the ONCD, CISA and Federal agencies, such as the SEC and FTC, taking on roles of cybersecurity policy setter, judge, jury and executioner.
It is clear that UK cybersecurity requires a major overhaul. The UK has no defensive cyber strategy covering the public and private sector. At the same time the US and EU has adopted an approach that enforces cyber compliance through regulation. The UK believes in a light touch approach for corporate governance, that allows for market forces to manage cyber risk.
Unfortunately cyber is a national security issue, requiring a nation wide solution. Allowing market forces to work has proven inadequate, cyber needs to be coordinated under a single authority. But should that be through the NCSC, are they really equipped enough to guide UK policy for cybersecurity. They are responsible for cyber essentials after all. Should one allow one branch of the security services to coordinate a solution for national security?
Then we have AI which requires governance over cyber, data and cloud security. Who is going to manage that?
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberattacks
https://lnkd.in/e6guGtzQ
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7338527542447861761