Call us now:
I am looking forward to today’s conversation on the SECs cybersecurity proposal with the The Institute of Internal Auditors Inc.
Ted Dziekanowski, the more you immerse yourself into the SECs proposal, the more you understand that the SECs requirements are aligned with Federal regulation to manage cybersecurity risk through FISMA. The SEC is on its own cybersecurity journey, with its own maturity program and metrics to comply with current U.S. Law. The SEC is compelled to comply with US regulation and understands cybersecurity risk management, oversight and assurance. It’s own cybersecurity maturity has been documented, managed and plans of action defined to close gaps.
If the proposal moves ahead it will require an enterprise wide approach to cybersecurity risk management, an approach that the SEC is familiar with. In general terms the SEC is not asking anyone to comply with something that it does not have to comply to.
We have created a TOM and framework for cybersecurity risk management, strategy and governance. Based upon existing standards, industry best practice and experience.
#securitiesandexchangecommission #cybersecurity #cyberriskmanagement #governance #compliance
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6922812215016239104