Here in lies and opportunity and a challenge for boards.

← Back to Blog

Here in lies and opportunity and a challenge for boards. When we consider the role of corporate governance over UK companies, we invariably miss off a major topic that is Governance over cybersecurity risk management.While it is fair to say that cybersecurity risk Governance is not regulated in the UK. It is important to recognise that it is regulated in the US and EU, through EN NIS 2, DORA, the SEC final cyber rule and NYDFS cyber regulations. It is fair to say that the direction of travel is towards the regulation of board cybersecurity governance across US healthcare and Transportation. The Australian Securities Investment Commission is also planning to regulate cybersecurity for boards of covered companies. Irrespective of regulaiton, cyber is a top table board risk.Therefore board should consider how they will oversight and assure cybersecurity risk management, to demonstrate their governances over cyber security risk. As in the worst case boards may face civil or criminal penalties for non compliance, in the best case boards should be focused on cybersecurity risk management to demonstrate to shareholders that they can appropriately manage cybersecurity risk through board governance. As investors, and insurers become increasingly aware of the need to mitigate cyber risk.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7292885686230151169