Call us now:
Here lies the problem with cybersecurity. No amount of Tech will solve the cyber problem. Any bank will tell you that cyber is resolved through its people, its process and its technology. One only has to look at how and why the US put the ONCD in place, why the EU regulated cyber and why other nation states have followed suite.
Tech helps, but tech doesn’t fix the problem. Marks and Spencer confirmed its recent cyber attack was the result of ‘human error’. Every cyber incident is fundamentally a result of human error; people buy tech, people use tech, people design, implement and manage controls.
However executives don’t have to ‘run to stand still’. Cyber is a risk like all business risks, it can be managed and while perfection does not exists, reasonable and adequate does. But cyber starts with the board and flows downwards. If board don’t get cyber then the rest of the organisation won’t and you’ll never have a culture of cyber risk management. That incidentally is what the EU is driving through its NIS 2, DORA and CRA regulations.
It all sound like motherhood and apple pie, but one has only ever seen successful cyber programs delivered this way. Educate the board, implement board cyber risk governance, implement risk management and oversight and assure the cyber program (sounds a bit like NIS 2, or the SEC final cyber rule………..)
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7331362754659774466