Call us now:
This is an important read. The U.S Department of Justice (DoJ) recently released the enclosed evaluation of Corporate Governance Programs. The DoJ Evaluation of Corporate Governance Programs update aims to provide further guidance that prosecutors should consider in conducting an investigation of a corporation, determining whether to bring charger, and negotiating plea or other agreements. That include the ‘adequacy or effectiveness of a corporations compliance program’.
For cybersecurity professionals in the U.S this is an important read. As cybersecurity risk management regulation develops further, corporate governance and regulatory compliance are important deliverables for boards and security professionals in demonstrating adequate and appropriate management of cybersecurity risk.
As the Justice Manual notes, there are three “fundamental
questions“ a prosecutor should ask:
1. Is the corporation’s compliance program well designed?
2. Is the program being applied earnestly and in good faith? In other words, is the
program adequately resourced and empowered to function effectively?
3. Does the corporation’s compliance program work in practice?
Ted Dziekanowski Rachel V. Rose, JD, MBA
#cybersecurity #governance #compliancemanagement #cyberriskmanagement #cyberlaw
(https://lnkd.in/e8T88FmZ)
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7039499737300914176