Call us now:
Maybe the theme for this years RSA conference is security Industry transformation? With a recognition that cybersecurity has to change in light of the failures of organisations to manage cyber risk. Demonstrated by recent high profile cyber attacks that include SolarWinds and cyber legislation, regulation and enforcement programs.
Cyber regulation is forging ahead across the US, EU and Asia, driven by Governments need to secure Critical National Infrastructure. Requiring a refocus from Cybersecurity to Cybersecurity Risk Management, a requirement that software vendors have no control and the selling of licenses does not address.
With boards having to take greater personal and legal accountability for cybersecurity risk management; the cybersecurity industry is going to have to rethink its approach equally with their clients. As regulators focus on managing cybersecurity risk backed by enforcement programs that are being tested in court. Developing fine regimes that penalize the failure to manage one of the most significant and complex non-financial risks at the board table.
The problem is not one of having the products to manage the risk, it is one of not having the awareness and acceptance of the risk in the first instance, closely followed by the necessary skills and experience to manage it. Problems that the security industry needs to focus, FUD debates don’t work and ‘Chicken Licken’ departed this mortal coil long ago.
Ted Dziekanowski
#cybersecurity #cybersecurityriskmanagement #compliance #
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6939825307440824321