Call us now:
Fear, Uncertainty and Doubt (FUD) has been the saviour and nemesis of cybersecurity for years. @Thaddeus Dziekanowski the cyber industrial complex has driven the cyber market and turned it into a $multi-billion industry, selling all new bells and whistles that offer to solve your cybersecurity, and world peace. Cyber is a complex risk, it’s a risk that is very difficult to manage. To do it properly you have to adopt a robust cybersecurity risk management framework such as NIST SP 800-37, complemented by a controls framework (NIST CSF). No amount of tech is going to manage cyber risks on its own, it requires people, process and technology. All of which costs money, allot of money, just go ask any tier 1 bank.In ones opinion, yes Silicon Valley does what Silicon Valley does, it innovates and it makes money. But market forces have failed across the whole cyber life cycle. Snake Oil has always been part of the cyber life cycle, with all the solutions in the market vying to fix your cyber (it can’t be done by systems), boards and executive management cannot abdicate responsibility. Boards manage risk, I’m always being told with pride that cyber is just another risk and we know the right questions to ask at the board table. Something that seems to be unravelling with every cyber attack.Boards are accountable for governance, oversight and assurance of cyber risk, and they sign off the spend for cyber solutions. So buyer beware, if you buy technology and have no idea how to use it to manage risk who is to blame…………………..not just those that design solutions to fix problems they do not understand, but those that buy them without understanding the risk.Cyber has been led by solutions trying to fix problems they do not own, and not by those that should understand risks and need to mitigate them.Brian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement #cyberattackhttps://lnkd.in/eGsCUFtD
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7324765967652216833