Call us now:
The role of the CISO will not get easier anytime soon, all head winds are pushing against the role. Cyber regulation is changing the role quickly; U.S and EU regulators are setting the guard rails for cyber introducing oversight, assurance and attestation of cybersecurity risk management to the Board and subsequently the CISO.
Court cases such as Uber and more recently SolarWinds highlight a direction of travel for the security profession that cannot be ignored. One that will intensify as more cyber regulation comes on line in 2025 in the EU and more cases pass to courts to adjudicate cybersecurity compliance and the fiduciary responsibilities of boards.
One wonders the impact of the enclosed article on product and service providers Faisal Khan? As CISOs pay closer attention to cyber risk and their role in regulatory compliance. While cyber spend is, and must increase, one expects the focus to be one of demonstrating a clear cyber risk management strategy. To address regulatory compliance, governance, oversight and assurance of cyber risk? Vendors will also be required to demonstrate their management of cyber risk and how their products and services mitigate client cyber risk.
The days of snake oil maybe coming to an end. If the worst outcome for boards and CISOs is a court room(see ASIC announcement and proposed Senate Finance Committee Bill). In ones opinion demonstrating reasonable and adequate management of cyber risk will be important.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC Senebria
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7246774783982333952