Call us now:
A skill shortage that will only get worst before it gets better. U.S. and EU legislation, regulation and enforcement programs that are on statute or in the pipeline are going to increase the burden on organisations across all sectors. Raising the need for qualified and experienced cybersecurity professionals, that can deliver cybersecurity risk management from the board room to the shop floor.
The Big accounting firms have stated aims to recruit 1,000s of cyber professionals, that don’t exist in the market place. A gap that can only be closed through training and education, that doesn’t address the knowledge gap.
Our real concern is we are heading towards a situation where regulation and enforcement is increasing ‘left of bang’. Regulation that is changing the requirements for ‘cybersecurity’ to ‘cybersecurity risk management’. There isn’t the ‘cybersecurity’ experience in the market place, let along to deliver ‘cybersecurity risk management’.
Creating a vacuum that will be filled to the detriment of organisations that will have to submit attested reports to regulators on compliance (AKA Sarbanes Oxley). That will be open to the scrutiny of regulators, markets, investors and courts in the event of cyber attacks.
Regulators are very clear that boards own the cybersecurity risk, and they are responsible for managing it. While you can transfer the mitigation, you cannot transfer the responsibility.
Ted Dziekanowski
#cybersecurity #cybersecurityriskmanagement #cyberregulation #governance #regulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6948531804685393920