Call us now:
One believes that Mr Schneier makes an appropriate observation, as it relates to cybersecurity risk management compliance. An observation that is now being supported by US and EU regulators who have introduced civil and criminal penalties for compliance to cybersecurity risk management regulation.When one considers that cybersecurity is a national, corporate and societal security concern; that many public and private sector boards have ignored cybersecurity and the effects of cyber attacks on corporate performance and national security (CNI). When one adds into the mix the use of AI that requires data governance, and the need to influence data security. There are few levers you can pull to influence industry to manage risk and when those risks effect national, corporate and societal security, you are left with few to push or pull. Outside of civil or criminal penalties.Regulation and the threat of civil and criminal penalties are part-and-parcel of the defensive cyber tool kit. A defensive tool kit that pushes cyber risk management ‘Left of Bang’ into the board room. Requiring board oversight and assurance of cyber risk, along with the threat of fines and/ or imprisonment. One must not ignore the fact that boards have a fiduciary responsibility to manage risk.@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Rachel V. Rose, JD, MBA Bruce LynskeyVeritas GRC#cybersecurity #cyberriskmanagement #cyberdefence
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7284522332956590080