I am please to have been asked by The Institute of Internal Auditors Inc. to participate in their webinar discussing the recent proposal by the…

← Back to Blog

I am please to have been asked by The Institute of Internal Auditors Inc. to participate in their webinar discussing the recent proposal by the Securities and Exchange Commission (SEC) to regulate cybersecurity risk management, strategy, governance and incident disclosure.

In my view the SEC proposal is moving cybersecurity oversight and assurance closer to the 3 Line of Defence (3 LoD) regime, operated by Financial Services Institutions. For Public companies, including foreign issuers that access US Capital markets. With Cyber-risk management (1st and 2nd Line) and Internal Audit (3rd Line) significant participants in cybersecurity risk management oversight and assurance. Placing a regulatory burden and fiduciary responsibility on the 3 lines and the board to manage cybersecurity risk, and report compliance to a formidable regulator.

Evelyn Hayes (CISA, CIA, CRMA) Cal Waits Joanne Sebby Karen Percent Manoj Satnaliwala, CPA, CIA, CISA, CGMA, CA, CMA, CS Brad M. Peter Lucas, MBA

#riskmanagement #webinar #cybersecurity #internalaudit #disclosure #stakeholders #cybersecuirtyriskmanagement #boardgovernance #cyberlaw

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6917782540346892288