Call us now:
It is a question that has been asked many times, over many years, ‘with all the free tools, help and support, and above all clear evidence that cybersecurity is a threat to corporate performance. Why do organisations not follow the basic guidance available to them?
Richard Horne, the head of the UK governments cyber centre (NCSS), has expressed his concerns that organisations are not managing cyber risk. He said these incident “must give us pause … not because they are unique, but because they are not.
Recent attacks against Marks and Spencer, the Coop and Harrods demonstrate the vulnerability of UK retailers, recent announcements of Solar inverters being compromised and the broad range of well publicised cyber attacks across the US, EU and APAC are clear demonstrations of the effect of cyber on national, corporate and economic security.
The question has been long debated, why does the public and private sector not engage in the cybersecurity risk management debate in a meaningful way?
The answer is not complex, and answer lies in both the board room and at the feet of government. It can be answered in a few statements.
1. Whats in it for me – Until you can impress upon decision makes the real threat that cyber poses to them, in a simple and concise manner. Decision makers will not listen.
2. Accept that market forces have failed, selling products and services to fix a problem that no one understands and using products that cannot demonstrate they fix the problem does not provide confidence.
3. Accept that cyber risk is a risk to national security. Governments have to stand up and make it clear that its a serious problem publicly and not hide behind doors.
4. Cyber risk management is everyone’s problem requiring a whole of society approach – Just go watch the Chris Inglis video.
5. The public and private sector needs help transposing complex cyber issues into simple solutions. It needs help in the oversight and assurance of cyber risk.
Cybersecurity risk management is a complex issue to manage at all levels. But that does not mean that it cannot be managed. But governments need to stand up and accept the problem, communicate problem and then help the public and private sector fix it.
Societies manage all forms of CNI, why do they not manage one of the most critical forms of CNI today, that is digitial.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Bryan Foss
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
https://lnkd.in/exNS7DGN
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7331245009129644032