Call us now:
The past few years have seen cyber stagnate on the board table. Allot of column inches have been given to cyber in the media. Plenty of evidence of the impact of cyber attacks; the lack of resources in the market place and the general sentiment that companies are not adopting cyber security.
The regulatory worm is starting to change this and starting to bite, in a very visible way. If the recent fines for British Airways and Marriott are delivered, it will send a clear message that the security of customer data has to be managed. US regulators are looking at holding executives liable with civil and criminal penalties for cyber. Investor sentiment is changing; cyber is impacting shareholder value and when equity and capital markets get scarred change takes place. I expect it to be a driver along-side the regulatory regime in focusing the board on cyber risk management.
But it will take good governance to drive cyber into the board. Boards are required to oversight their risks, to place assurance that risks are understood and managed appropriately. This requires good corporate governance, a clear understanding of the risks, clear reporting and evidence that the risks are being managed and advice and challenge from internal and external qualified technical experts. (QFEs)
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6554987583624011776