Call us now:
Brian D. McCarthy, it is not so much the SEC final cyber rule that drives the need for a new cyber paradigm. The need to view cyber through a new lens is driven by the need to manage cybersecurity as a national and economic security concern.It maybe the case that the new head of the SEC decides that the SEC cyber rule is struck down. Albeit the need to protect investors and capital markets from failures in cybersecurity and the management of ICT risk still remains (CDK, United Health, Crowdstrike, MGM, SolarWinds, US Telecoms, Snowflake, the list is quite large). Especially if one believes the statement by outgoing head of the FBI Chris Wray.The issue at hand is not one of shaming failures to manage cybersecurity. But the rational for cyber regulation is to address the lack of oversight and assurance of cyber risk. Cyber risk that has exposed national, corporate and economic security.What levers are available to address cyber risk? Most attempts have failed so far. For example, the US has issued more cyber frameworks, standards, regulations than any other nation. Yet cyber still remains a national concern. Unfortunately asking the private sector nicely has not worked. In part a reason why the EU is moving ahead with cyber regulation.The comments by Bruce Schneier resonate clearly; demonstrated by EU cyber regulation and by US senators to introduce legal penalties for cybersecurity compliance.https://lnkd.in/ed4dGecm@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Bob DixVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7285959386684878849