As a Security Professional and a Counsel Appointed cyber Advisor I can empathize with the CISO in the Uber case.

← Back to Blog

As a Security Professional and a Counsel Appointed cyber Advisor I can empathize with the CISO in the Uber case. I suspect that what the CISO went through at the time of the incident in 2017, to some degree, has been carried out by many companies between then and now.  Carpets bulging with examples of cybersecurity incidents under them and cupboards full of skeletons.  However the Uber case has been heard in the court, the evidence presented and conclusions drawn against the laws that were in place at the time. It is a very important case for boards and leadership teams and it is not the only case that is in the public domain, with the SolarWinds case drawing the CSO into court. (https://lnkd.in/ejFQEprN).

If as is expected U.S and EU cyber risk regulations make their way through the system over the next 3-6 months, then we have only just stared to see the cyber-legal challenges ahead for boards and security professionals. Regulations that are clear in their intent to manage cybersecurity risks. To a ‘T’ these regulatory regimes require boards to demonstrate their governance, oversight, assurance and the management of cyber risks. Alongside the DoJ and DoTs cyber regimes that come with stiff penalties including both civil and in some cases criminal conviction.

Whether we agree or not cyber is moving ‘Left of Bang’ (https://lnkd.in/ecukvdWd) it is a regulatory compliance program. One only has to hear the words cyber and national security in the same sentence and see the increase in supply chain hacks to conclude that market forces are not working and the ‘Stick’ is the likely outcome over the ‘carrot’.

Ted Dziekanowski we have been discussing this for over 12 months. The Uber case and one suspects the fallout from the recent Senate Judiciary committee hearing on Twitter are the start of a long visible road for boards and security professionals. We have written thought leadership over the past 12 months and a program to support boards and security professionals work towards cybersecurity risk management compliance. www.augustagrp.com

#cybersecurity #cyberriskmanagement #cyberlaw #cyberregulation #securitiesandexchangecommission #governance #theaugustagroup

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6984051793827635200