Call us now:
A sobering and well thought through article from HBR on the cyber risks of the escalating Ukrainian conflict. As I posted earlier today cyber is a long game for most organisations.
But if you are just now evaluating your cyber posture, you are probably too late. Effective cyber defense is a long game requiring sustained strategic investment, not a last-minute bolt on.
Cyber is not about offensive strategy, demonstrating which government or their proxy can hack the best. As with any security domain cybersecurity has to be a balance between offensive and defensive security, and Governments cannot control defensive cyber or be societies defender of last resort. Once the cyber Maginot line has been circumvented, offensive teams are of little use and the question one raises is have we implemented enough defensive cyber strategy to manage corporate cyber-risk. Have we done enough to manage both ‘right and left of bang’, make your own judgement from the HBR article?
The impact of cyber on the US DIB has already been felt and the risk to supply chains of cyber attacks are all to real, as has been demonstrated over the past 12 months through various cyber attacks. I do not do FUD (Fear, Uncertainty and Doubt) debates, they add little value and just hype up a situation. But nor can we run an ostrich debate with a hope that it will all be OK on the night.
Cyber is an enterprise wide risk that has to be managed, for that very reason you will find few regulations talking about managing cybersecurity and allot talking about managing cyber-risk. Cyber is not a technical problem its and enterprise wide business issue.
In my opinion cyber was once an outlier scenario and set of extreme loss events. Our dependence on digital means it is now very much closer to an unexpected loss, and for some organisations it should be treated as an expected loss. Where the impact maybe closer to an organisations inherent risk than residual risk, that is being felt by the cyber insurance industry today.
Lets hope that this is not the case and everything cools down, there will be no winners, only losers.
Ted Dziekanowski Jason Spezzano Brian McCarthy
#theaugustaplan‚Â #cybersecurity‚Â #cyberriskmanagement‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #cyberriskgovernance‚Â #ransomeware‚Â #governance‚Â #nist‚Â #cyberinsurance‚Â #insurance‚Â #defence‚Â #defense‚Â #sec
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6901224903924936704