A great article written earlier this month by James Dempsey discussing the impact of enforcement in cyber regulatory compliance.

← Back to Blog

A great article written earlier this month by James Dempsey discussing the impact of enforcement in cyber regulatory compliance.

The breadth of cybersecurity regulation being released by U.S, EU and Australian regulators in 2022 and so far in 2023 is greater than at any time previously. But ‘any regulatory system is only as good as its enforcement. As University of Pennsylvania law professor Cary Coglianese has explored€€and a 2018 National Academies study agreed€€performance-based rules are meaningless without enforcement https://lnkd.in/des22qDP).

John makes a very powerful argument that self assessment and self certification are not sufficient for enforcing cyber regulation. So what next for cyber regulation, should the board room be rethinking its approach to cybersecurity risk management regulation ahead of the wave of U.S, EU and Australian cyber regulations. Do the Uber, CHS health and Drizzly cases start to set legal precedence?

Ted Dziekanowski Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA

#cyberriskmanagement #cyberlaw #governance #regulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7047118597260750849