A nice paper by Michael Kranawetter on the future of cybersecurity risk management.

← Back to Blog

A nice paper by Michael Kranawetter on the future of cybersecurity risk management. Boards play a strategic, pivotal, role in the management of cybersecurity risk. A risk that is an issue for national, economic and societal security and a risk that brings with it legal and compliance risk for boards. The challenge for boards is how do they provide governance over cyber risk. Providing oversight, assurance and attestation of cyber risk, aligned to their fiduciary responsibilities?For boards to be successful they must adopt a structure for oversight and assurance to maintain reasonable and adequate compliance to cyber regulation. A structure that Veritas GRC created in response to requirements to comply with the SEC Final cyber rule, EU NIS 2 and DORA. One that adopts the 3 lines of defence framework, creating the appropriate organisational structures for oversight and assurance of cyber risk through an RMF. Enabling the identification, quantification and mitigation of cyber risk. An RMF that enables the adoption of any cybersecurity controls framework for the mitigation of cyber risk.As with CISA, what comes next is Continuous Diagnostic Mitigation (CDM). https://lnkd.in/e4kV7MrdIn short providing the capability for organisation to evaluate the effectiveness of controls. Either real or near real time. A capability that can be in part driven by AI. Seems like @Thaddeus Dziekanowski, aka Nostradamus, your predications turn into reality yet again.At Veritas GRC we educate boards on cybersecurity risk management board governance. We support boards oversight, assure and attest cybersecurity risk management. Delivering programs written with colleagues from the audit and legal community to enable reasonable and adequate management of cyber risk. Please reach out to find out more on our board programs and our work on CDM.Brian D. McCarthy Faisal Khan Schellman Rachel V. Rose, JD, MBA Ryan Buckner#cybersecurity #cyberriskmanagement #cyberregulation #corporategoverance #cybergovernance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7282023711791099906

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags