Call us now:
Is it just me Paul Rosenzweig? Or have the past 12 months brought about a shift in the cyber conversation, and the visible attention and public concern raised about the cyber threat. Demonstrated by several high profile Congressional Committee meetings raising cyber as a national security concern? Yet we release cyber advisories with an expectation that there are enough interested parties across what is a mammoth attack surface to address the problems. As though most understand about how to fix the problem, and lets not forget that 99% of companies are SMEs (SMBs), that have few resources of skill to manage cyber risk.
When one considers not only U.S cyber strategy, but that of all nations, and the gap between cyber strategy and cyber risk management. One should remember that to close the protection gap takes time and skilled resources. Neither of which are anywhere near abundant. As the recent attack on UnitedHealth demonstrates; the past 20 years of digital development has created connected infrastructure across society upon which we depend, that in general has not been built with security in mind. We may now be paying the price.
However we wish to paint the cyber picture, it is fair to say that it is not working. Admirably demonstrated by the rise in cyber attack frequency, complexity and severity of impact. We cannot rely on the public and private sector to protect itself from cyber attacks and ransom. Cyber is a national security issue. Cyber risk management requires government leadership, sponsorship and to quote a well used fraise ‘A whole of society Approach’. An approach that can be translated into actual deliverables supported by carrots and sticks.
One must also consider that our adversaries may just be better at cyber than we are, and have more resources devoted to cyberattacks. (https://lnkd.in/eKwR26_e)
We do not just need a better strategy. But coordinated solutions to reduce our cyber risks and close the gaps in our cybersecurity skills, knowledge and experience.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7171070019944992768