Call us now:
Not all the sentiment in the post I agree with, you cannot a line down between 2 leadership styles, as there are many different styles to chose form. One aspect of cybersecurity that is now front and center, demonstrated by the recent cases and filings against Uber, SolarWinds and Drizzly is that cyber is a regulated governance, risk and compliance issue.
In ones opinion cyber professionals should be closer to their general counsel, and be able to demonstrate adequate and reasonable compliance to cyber regulations. Regulations that are piling up with little sign of abatement. As such there’s unlikely to be much room for programs that cannot demonstrate regulatory compliance. At the risk of civil and/ or criminal penalties.
The challenge and opportunity for many CISOs will be aligning their views with that of management and sub committees. They all have a vested legal interest in cyber security risk management compliance. U.S cyber regulation is demonstrating compliance caselaw and EU cyber regulation has the possibility of criminal penalties attached.
Ted Dziekanowski Brian D. McCarthy
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7140000517778219008
