Call us now:
Brian D. McCarthy you raise good questions. As registrants must describe the boards oversight of cyber risks, any board committee or sub committee responsible for oversight, the processes by which boards are informed of cyber risks, managements role in assessing and managing cyber risk, and the relevant expertise of persons responsible for assessing and managing cyber risk.
This raises your questions over the role of human resources as a data owner of PII, their role in the assessment of the expertise of those individuals that assess cyber risks, and of the recruitment of cybersecurity professionals and management.
Chief People Officers often are members of management. Does this make Human Resources an accountable department and the Chief People Officer a role “responsible for assessing and managing such risks. As the theft of PII, cyber competency and recruitment are key processes and could be consider to contribute to cyber risks.
Ted Dziekanowski Rachel V. Rose, JD, MBA Bob Dix
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7110877139595317249