I think cybersecurity risk management and ESG will converge under ESG.

← Back to Blog

I think cybersecurity risk management and ESG will converge under ESG. Cyber is a very significant risk for shareholders and US cybersecurity regulatory regimes are developing quickly. With a number of Federal legislation, regulation and enforcement programs underway and ESG is an existing program driving investor oversight and reporting.

Cybersecurity compliance and reporting is a challenge. Cyber is recognised as a top non-financial risks, it is a complex risk to mitigate and the range of threats from cyber is difficult to manage as the Lapsus$ hack and the recent US ‘Shields up’ program demonstrate.

Cybersecurity risk management and regulatory compliance will create challenges for many, much like Sarbanes Oxley. But ESG will support oversight and assurance of cybersecurity risk; however finding the right number of metrics to measure cybersecurity compliance, that’s going to be a challenge.

Ted Dziekanowski

#dfars #cyberinsurance #cybersecuirty #governance #cyberregulation #compliance #cmmc #sec #doj #cybersecurityrisk #esg

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6914832887313772545