Call us now:
The European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines at the end of 2021. At a time when the US Federal government is also progressing legislation through Congress to address cybersecurity governance, oversight, assurance and incident response times. Strengthening American Cybersecurity Act of 2022 (March 2022).
The cyber regulatory landscape is accelerating driving cyber risk management and cyber risk governance reporting for public and private sector organisations. The regulatory changes will place a burden on the board room for managing cybersecurity, moving the board conversation on cyber to the ‘left of bang’, focusing on compliance and enforcement instead of ‘right of bang’, incident response.
Creating legal and compliance risks that need to be addressed, bringing Legal counsel into the security conversation ahead of regulatory compliance and not after the fact. ‘Assessing what is reasonable security’.
Dean Armstrong QC Ted Dziekanowski
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6906948553458229248