It’s not just ICS/ OT environments that should care about Governance and compliance over cyber risk.

← Back to Blog

It’s not just ICS/ OT environments that should care about Governance and compliance over cyber risk. Governance and compliance is core to cybersecurity risk management and if demonstration were needed one only has to look at current and pending U.S and EU cybersecurity risk management regulation, and recent announcements by the Australian Securities and Investment Commission (ASIC).

Cyber regulation holds boards of covered firms accountable for the oversight, assurance and attestation of cyber risk, with the potential to face civil or criminal penalties. It is important therefore that covered regulated entities, and that could be greater that 150,000 companies in the EU alone, are prepared to demonstrate governance over cyber risk. A task requiring boards implement risk management practices; embed robust board programs for cyber risk oversight and assurance and for boards to have the appropriate skills, knowledge and experience to demonstrate reasonable and adequate compliance to regulation.

Providing a solution that enables boards demonstrate reasonable and adequate governance of cyber risk is a priority. Requiring more than board reports, discussed at quarterly board meetings, to demonstrate compliance. It requires robust data aligned to cyber risks and risk mitigation.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Dan Miles Rachel V. Rose, JD, MBA

Veritas GRC Senebria

#cybersecurity #cyberriskmanagement #ai #governance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7244236508147191808

Categories

Cyber Risk Management, Governance & ESG, Regulation & Compliance

Tags