Call us now:
A good question, the answer is respectfully ‘NO’. But a question that is increasingly being driven towards a required answer of ‘YES’ by cyber regulation.
There is a skills crisis in board rooms and a crisis that one sees getting worst. Cyber is no longer an issue that can be hidden behind the boardroom vale of Fear Uncertainty and Doubt (FUD), as it has been for many years. Cyber is turning into a national security issue (Words of U.S Congress not mine), and boards are being caught in the headlights and cross fire for good reason.
Cyber risk management is not a job for the CISO, it can’t be. It’s the collective responsibility of the board. A collective responsibility that is being regulated into board rooms across the U.S. EU and APAC. A responsibility that is being fed by civil and criminal penalties and caselaw.
Cyber is now a legal and compliance issue for board members, and board members are being asked to answer the question by regulators, ‘Does Your Board of Directors Know Cybersecurity’ with a resounding ‘Yes’.
It is why we at Veritas GRC have spent time supporting the legal and audit profession understand cybersecurity risk management. Our partners Brian D. McCarthy and @Thaddeus Dziekanowski have delivered 1,000s of hours of cybersecurity, risk management, cloud and audit education across U.S Federal and State Agencies and the private sector globally. Our partners Rich Waite, M.Ed. and George Sawyer have many years of experience developing and delivering exceptional education program content across regulated industries.
‘Boards of the future need to evolve to include cybersecurity expertise’.
So we’ve been working with attorneys and audit professionals to develop programs that support boards understand cyber risk management and cybersecurity. With the appropriate lens for cyber regulatory compliance, supporting boards on the complex journey to answer the question ‘YES’. Our board of directors understands cybersecurity, to provide reasonable oversight, assurance and attestation of cyber risk, required by regulators.
‘Addressing the cyber skills crisis on boards and prioritizing cybersecurity expertise is not only a necessity but a strategic advantage in modern business. A collective effort is needed from organizational leaders, industry experts, and potentially policymakers to drive this essential transformation.’
A transformation that Veritas GRC is well prepared to support boards deliver.
Rich Waite, M.Ed. George Sawyer
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7171443782305861632