I am surprised that it’s not higher given the challenges organisations face with cyber regulation from the U.S and EU.

← Back to Blog

I am surprised that it’s not higher given the challenges organisations face with cyber regulation from the U.S and EU. The SEC proposal like its EU counterparts is not ‘cybersecurity’ regulation, it’s ‘cybersecurity risk management’. There is a significant difference.

Cybersecurity risk management regulations require the adoption of a cybersecurity risk framework; demonstration that cybersecurity risks are understood and managed through a cybersecurity program; assured and attested through board governance.

U.S FISMA 2002, 2014 and 2022 demonstrates the difference, requiring the adoption of NIST SP 800-37 and the use of cybersecurity framework profiles to mitigate cyber risk across Federal agency supply chains.

We summarize an appropriate approached for boards to meet SEC, EU NIS2, DORA, CRA cyber regulations here : (https://lnkd.in/e-xC3qAR)

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #securitiesandexchangecommission #cyberonapage #governance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7029380668765712384