Call us now:
Being CISO is not the easiest of jobs, burn out is not new and will likely get worst before it gets better. The role is enterprise wide, as broad and as deep as an organisations data, the physical and logical threats the organisation faces, the complexity of its technology assets, the support the CISO receives, the organisations strategy and operations, and the legal and regulatory environment.
Cyber is quickly becoming a legal and regulatory issue with U.S and EU regulators working on cyber risk regulations that dramatically affect the role of the CISO. Transforming it to a role that requires the management of cybersecurity risks, requiring organisations to demonstrate their assessment of cyber risks (and business risks), evaluate remedial actions, and importantly requiring boards to attest and report cyber risk compliance to regulators.
Legal risk for CISOs is being demonstrated as significant and increasing. CISOs are finding themselves in court justifying their actions following cyber incidents or compliance failures. The role of the CISO is more important today than it has every been. Some regulators require organisations to have CISOs therefore without CISOs or security experts reporting to the board companies will not be able to demonstrate their cyber risk management compliance.
Losing security professionals due to burn is a sign that change is needed at all levels. There is simply not enough time and $1Mn salaries may lose their appeal when weighed against the legal and regulatory risks unless changes are made.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #CISO #burnout #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6975713624304537600