Call us now:
Yeh baby, it’s so sexy. We’re gonna manage your cybersecurity so you’re all protected, and you can all go to sleep at night………………..ahhh no.
This is a balanced article that points out there are plenty of people across the market ‘that often lack the depth and precision essential for true cybersecurity practice.’ A lack of depth and precision is both dangerous to clients and with cyber regulatory transformation front and center, dangerous to those ‘experienced professionals’. If boards are being held accountable and responsible, then security professionals are held accountable and responsible. Cyber now comes with compliance, risk and legal implications for boards.
Market forces have failed to demonstrate that boards, security professionals and tech solutions can manage cybersecurity, it’s one reason why cybersecurity is being regulated. Regulation requires boards demonstrate they provide the appropriate oversight, assurance and attestation of cybersecurity risks.
Cybersecurity is not information security, and cybersecurity is not risk management. Cybersecurity is historically risk mitigation. Cyber risk management regulation requires companies and boards demonstrate they know their risks and managing their cyber risks, enterprise wide. A process that is significantly greater than mitigating risks through the implementation of controls, and most cyber tech is an enabler of controls to mitigate risk. No cyber tech is not going to manage cybersecurity or manage cybersecurity risk enterprise wide.
As the article points out cyber is a complex risk. It is a risk that is being transferred into the board room and it is a risk that requires boards to accept its an investment and not a cost. An investment that will continue indefinitely and an investment that cannot be guaranteed to manage all risks.
Its also a risk whose management weighs heavily on the minds of insurers, who site on the ‘Right hand side’ of the risk transfer equation.
@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner Faisal Khan
Veritas GRC Senebria
#cybersecurity #cyberriskmanagement #cyberrisktransfer
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7229835345129799680