Call us now:
Great picture: The challenge for the CEOs of public utilities, and those of public U.S. companies if the SEC gets its way, is that the solution to cybersecurity risk management is not about software products, cyber about risk management.
I’d argue that the sale of cybersecurity products has party caused the problem many companies have with managing cyber security, relying on products to solve the complex cybersecurity problem. As an enterprise wide risk cybersecurity requires a whole of organisation (whole of society) approach. One just has to look at NIST CSF profiles to understand how complicated it is for any organisation and CEO to manage cyber risks. No single product or service will fix the problem.
CEOs are now being regulated ‘left of bang’, to focus on cybersecurity risk management compliance. To which monitoring is just one tool of many required to form part of a whole of organisation (society) approach. Adopting a risk management approach will benefit vendors, setting out risk mitigation inclusive of people, process and system solutions.
Ted Dziekanowski
#cybersecurity #leftofbang #cybersecurityriskmanagement #regulation #governance
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6941763401610113024