Call us now:
Cyber is a national security problem, it’s a problem that is creating a threat to our way of life. These aren’t my words but those of various heads of security services across the U.S and EU. Many hours of congressional committee time has been spent over the past 2 months discussing the effects of cybersecurity and the growing threat that cyber poses to our CNI, and by extension those critical services we rely on.
Cyber is no longer a FUD debate however no amount of persuasion will convince companies not pay a ransomware. To ask organisations to put in place incident response and incident management programs, as though that will make everything be OK (I’m not disagreeing with IR or IM programs) does not address the cyber problem. Albeit not so long ago many nations signed up to an agreement not to pay ransomware (how’s that worked out for United Health?) Now we want to persuade companies not to pay ransomware. One has said many times that no amount persuasion will force companies to adopt cybersecurity. Ask yourself why U.S and EU regulators are enforcing cybersecurity risk management ‘Left of Bang’ and directing covered entities to manage cybersecurity risk?
Addressing cybersecurity is a bit like getting firms to install smoke alarms, test electrical safety, install security gates and locks on doors to prevent and detect security incidents, and sprinklers and burglar alarms to respond. At what point does the insurance industry come to terms with the fact that cyber is a risk that cannot be managed and mitigated through persuasion?
This video demonstrates how hard cybersecurity risk management is: https://lnkd.in/e5WivnNf
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberattack #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7196175690688249857