If CISOs want to survive we have to change the cybersecurity message.

← Back to Blog

If CISOs want to survive we have to change the cybersecurity message. Having a nimble response to cybersecurity issues as they arise, is not going to address the cybersecurity problem that organisations face. Cybersecurity risk management regulation is doing that.

Cyber is no longer just a ‘Right of Bang’ problem. Cybersecurity is a regulated risk (U.S and EU), a regulated risk that requires the attention of the CISO and the board. U.S and EU regulators are moving to implement cyber regulation. CISOs and boards are required demonstrate they are managing cybersecurity risks ‘Left of Bang’ and cybersecurity incidents ‘Right of Bang’.

CISOs need to understand the fundamental shift cybersecurity risk management regulation introduces to the cybersecurity conversation. Cyber regulation increases legal and compliance risks for the CISO and Board. Cyber regulation comes with civil and criminal penalties, requiring the CISO and board demonstrate governance and provenance over their management of cyber risk, that’s a Left of Bang problem, and right.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7200789302908256256

Categories

Cybersecurity, Governance & ESG, Regulation & Compliance

Tags