Call us now:
I see trouble ahead’. There’s allot to be said about the analogy’s between working in compliance and working in cybersecurity. Both fields are high stress; for many they are comparatively low paid; they require skills in fighting against corporate inertia. They are both important roles for firms that need to demonstrate compliance to cybersecuirty risk management regulations.
We face a significant shortage of the necessary skills to address cybersecurity risk management from the board room to the shop floor. At a time when cyber is increasingly recognised as a national security risk and in response regulators are implementing a legal and compliance road map for covered entities. A road map that requires boards adopt corporate governance, oversight, assurance and attestation of cyber risk. Attestation that requires independent arbitration across an organisation to manage regulatory compliance. Compliance, or failure of compliance, that may come with hefty penalties and is being tested in court (SolarWinds, Uber, MediBank). If U.S and EU regulators have their way.
Cybersecurity risk management is now a regulated, legal and compliance risk and without compliance resources, board will struggle to attest to compliance.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #compliance
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7204706329708351488