A nice anecdote about cybersecurity risk management, that absolute Security does not exist and why the demonstration of adequate security is what…

← Back to Blog

A nice anecdote about cybersecurity risk management, that absolute Security does not exist and why the demonstration of adequate security is what matters.

U.S and EU cyber regulation influencing board decision making over cybersecurity and risk management. Regulation now transfers cyber risk management into the board room, onto the board table and requires board to make decisions over how they will manage risk. If the direction of caselaw in the U.S is a barometer then civil and criminal penalties will follow for non compliance. Increasing board risk.

The security profession and the board room needs to adapt to change, adapt to the challenges of cybersecurity risk management and regulatory compliance, demonstrate and attest adequate compliance to cybersecurity risk management.

Ted Dziekanowski Brian D. McCarthy Rich Waite, M.Ed. George Sawyer

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7158385030300348417

Categories

Cyber Risk Management, Governance & ESG, Regulation & Compliance

Tags