Call us now:
Cyber is no longer a Fear, Uncertainty Doubt (FUD) debate. Cyber is a geopolitical (Ukraine-Russian, Iran, China, North Korea), criminal (ransomware, DDoS, phishing), proxy (National Security, IP theft), script kiddy (Microsoft, Okta, NVIDIA) and supply chain (SolarWinds, Toyota) issue. An issue that can cross all boundaries.
I fear however we may be along way down the road they call denial. Addressing the problem will take time and resources we do not have, to make any meaningful short term response. It is one reason why cyber insurers are struggling to underwrite cyber risk and in my view a reason why Governments are turning to regulation to enforce cybersecurity risk management compliance.
Most recent cyber regulation and enforcement (SEC proposal, DORA, EU NIS 2.0 CRA, NTDFS) focus on cybersecurity risk management, governance, strategy, incident response and board attestation. That is a different paradigm to which many organisations (and CISOs) have had to deal. To meet these requirements we have taken our combined 50 years of cybersecurity, cybersecurity risk management, regulation, governance, strategy and education experience. To create a board and executive cyber education program. A program focused on enterprise wide cyber risk management, under a cyber governance Target Operating Model, using risk management(FISMA) and cyber security(NIST CSF) standards that can be applied internationally. Integrating cybersecurity risk management, cybersecurity practices and reporting for board attestation.
A summary is enclosed, let us know your thoughts?
Ted Dziekanowski Rachel V. Rose, JD, MBA Gerry Kennedy
#cybersecurity #cyberriskmanagement #cyberlaw #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7000038472556109824