The giant slowly awakes to the opportunity that is cybersecurity risk management compliance.

← Back to Blog

The giant slowly awakes to the opportunity that is cybersecurity risk management compliance. Closed cases make their way to the front of the cue and the plea bargaining begins.

The enclosed provides a great summary of the consideration those companies that work with the US government may wish to consider. If they want to avoid the gaze of the DoJ and the False Claims Act.

Be careful of
1. Submitting inaccurate self-assessment scores with respect to NIST compliance maybe a problem.
2. Deferring to employees who push back against cybersecurity requirements.
3. Knowingly permitting contractor noncompliance with security requirements.

Putting in place corporate governance and the associated process to oversight, assure and attest cyber risk, and regulatory compliance is the approach adopted by the the SEC. Other Federal agencies will follow suite, and it will create more opportunities for the DoJ, if there weren’t already enough. It’s a nice little earner and one shareholders may wish to consider in their investment decisions.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal Khan

Veritas GRC U.S. Department of Justice

#cybersecurity #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7238459568933019648