Call us now:
A further perspective on the impact that cyber is putting on CISOs, as corporate risk will likely increase with the departure of CISOs. Leaders, who are in a position to understand both the cyber requirements of their organisations and the strategic and operational aspects. Required to comply with EU and U.S cyber regulations.
If the board room does not address the personal and corporate challenges that CISOs face, they may find that they are left without the necessary skills to protect their own reputations. As regulation places direct corporate responsibility on individual board members, to assure and attest cybersecurity compliance.
CISOs more often than not are not corporate officers or directors and as such they should not take on the corporate responsibilities of them. As a Counsel appointed cyber expert and advisor I would say that is unwise for CISOs to accept the accountabilities and responsibilities that cyber regulation requires, without the appropriate legal and regulatory support. The recent UBER, Drizly and FCA cases demonstrated the impact that cybersecurity compliance places on security professionals and executives.
Unfortunately the rise in cyber attacks in line with low cyber maturity places CISOs in a difficult position. Approaching cyber regulation shifts cyber ‘Left of Bang’ into the board room, that may prove a double edged sword for CISOs in the short term, irrespective of whether they stay or leave an employer.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #ciso
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7034791055916982272