Call us now:
Cyber security is a relatively new field. From the development of information security with standards like BS 7799 through ISO 27001, cyber security with standards like NIST 800-171 and the more recent evolution of cyber security into cyber risk management.
Recently I was asked to input into a discussion on the role of the CISO, where next. The first step is transforming the security professional into a risk and security professional. Cyber is an enterprise wide risk and forms part of the bigger risk picture. Which is being captured through regulations as diverse as EU GDPR, CCPA, PCI-DSS, EU-NIS, NYDFS.
Cyber is a costly risk to manage pre- and post incident. Through incident remediation costs, legal costs, brand damage and regulatory fines. Areas in which consumers, regulators, capital and equity markets, insurers have a vested interest. Through the protection of financial markets, the management of shareholder value and the safeguarding of personal data.
With this in mind I see legal as an area of development for security professionals. When it goes wrong cyber is costly and invariably makes its way to arbitration and/ or court.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6668455485735223296