Call us now:
The issue of cyber reporting is so much bigger for the HR profession, as my colleague Brian D. McCarthy has discussed many times. While this article makes clear the link between HR and cyber for UK based directors in the pensions industry. There is a broader question of the role of HR in cyber regulatory compliance to EU NIS2, DORA and the SEC cyber rule. Regulations requiring boards and organizations to demonstrate oversight, assurance and attestation of cybersecurity risk management, at risk of civil or criminal penalties.
Appropriate cyber risk management requires leadership teams and staff have the appropriate and necessary competencies to manage cyber risk. Setting the stage for company to define the role of the CISO as a professional, in line with their peers. For HR to define the appropriate cybersecurity competency frameworks for leadership teams, cybersecurity and organizational roles, based upon a companies mission and business objectives and regulatory reporting.
Under the SEC final rule, is the HRD an Accountable Executive given their influence over organisation design, staff competencies, education and training?
Ted Dziekanowski
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7162417910169210880