Call us now:
A useful read to help defend a companies cyber security programme and understand why some companies failed.
Cyber is a complex risk and it has a track record of begin a Board killer. Removing CEOs, CIOs and CISOs, like Richard Smith of Equifax or Dido Harding of Talk Talk who both moved on following a cyber attack.
For me there are many reasons why things go wrong in security and it’s not a a simple case of just pointing the finger. People must rightly be held accountable. The enclosed reasons are useful pointers to why things go wrong, invariably why cyber breaches succeed and with the right guidance can be used to support the success of the security programme.
Understanding and managing the risk is everyone’s responsibility, getting the right information to the right place is important so that informed decisions can be made.
My favorite is risk appetite, boards often want simplicity, but cyber is a very complex function. Not out of obstinance, but out of fact. Simple risk appetite statements hide reality, facts and above all lead to the wrong decisions being made about the wrong cyber security posture.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6577084945569767424