A useful read to help defend a companies cyber security programme and understand why some companies failed. Cyber is a complex risk and it has a track record of begin a Board killer. Removing CEOs, CIOs and CISOs, like Richard…
A great article, cyber risk poses a significant risk to the balance Sheet. We can debate whether we mean balance sheet or financial statements in general and where it impacts more, or less. But the fact remains that cyber risk…
US boards are strengthening their cyber security expertise in response to a rapidly changing regulatory landscape. For example the proposed US Congress bill S.592 aims to legislate publicly listed companies to have cyber expertise at the board table. To address…
Protecting what many now call the next ‘black gold’. The big problem is on one hand we’re all now so used to data, personal records, being stolen. On the other the regulatory environment is and will get much stronger. It’s…
A great article. If you can’t measure it you can’t manage it. There is, and will continue to be a gap between the board and security until there is a meaningful set of quantiative measures which can be used by;…
A recent survey from Grant Thorton correlates with recent reports on the market impact of cyber and cyber attacks. It is estimated that UK mid-market companies can lose between 3% and 10% of revenue following a cyber attack and upto…
I recently completed an interview on cyber risk management with Sheffield Haworth. We discussed where the responsibility for cyber risk management sits, at the board table or within the technology function. How companies can create value out of cyber risk…
The US House and Senate wants answers from Capital One and Amazon on the recent data theft. Senate and House committees are looking for answers and a letter has been sent to Jeff Bezos, the Amazon CEO. No doubt asking…
What I find interesting is that those in cyber security have said for many years it’s one of the biggest non-financial risks a company has to manage. The cost of managing the risk is much less than the costs of…
A bit of a shameless plug. I’m going to be speaking at the R3 summit this year. on the 17th of September. About how do you engage with the board on cyber security. View Original Post
