Is the knowledge gap between the CISO and board improving despite cyber regulation being a priority for some companies in the U.S and EU.

← Back to Blog

Is the knowledge gap between the CISO and board improving despite cyber regulation being a priority for some companies in the U.S and EU. There is a need for board education to improve members understanding of cybersecurity, cyber risk, management and governance. A need for CISO to better understand risk management and the adoption of risk management frameworks and cybersecurity standards such as NIST SP 800-37 and NIST CSF.

Bringing both the board and CISO together to improve cybersecurity risk management is critical to manage regulatory compliance and for boards to demonstrate cyber governance, oversight, assurance and attestation.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7193520663045787649