Call us now:
It’s important when one considers cybersecurity risk to see a direction of travel toward regulation and compliance. It is true to say that you should not regulate for regulations sake, however when one considers cyber is a risk that most boards at best do not understand, or at worst ignore. Finding a solution to enforce the management of cyber risk, especially now we use AI is important.Having led both first and second lines of defence for cybersecurity in financial services; written allot of thought leadership (www.augustagrp.com) and presented to both government and industry. One understands the effect of cyber risk to national security on one hand, and you can’t take a horse to water and make it drink on the other. Unless there’s a carrot, stick or both.One recently met a chairman who was very forthright about his view of cybersecurity risk. It wasn’t his problem, his role was to ask the right questions to ensure his CEO managed cyber risk through his management team. He felt no responsibility for managing the risk, his attitude was ‘its unlikely they will never come after me’. This is not the first time that I’ve heard this, and it is reflected in many leadership papers that places cyber at the top of the boards risk table. AKA a risk that is not being mitigated. A risk that is going to grow with the adoption of AI @Thaddeus Dziekanowski.The challenge is not one of restarting resilience conversations, they should have never stopped (cyber is a risk to national security). The challenges is they never started. Resilience is an activity requiring legal and regulatory oversight and assurance, and for boards to demonstrate governance over cybersecurity, cloud, data and now AI risk.Codes of conduct are fine to educate but provide little value unless there is a carrot and stick. They do not deliver risk management or resilience, boards do that, ever wonder why those that regulate cyber add board accountability clauses?@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Rachel V. Rose, JD, MBA Bryan FossVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation #cybergovernancehttps://lnkd.in/eQTHPFch
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7321435216395264000