Last week SolarWinds announced Wells notice’s have been issued to both the company, directors and officers, including the CFO and CISO.

← Back to Blog

Last week SolarWinds announced Wells notice’s have been issued to both the company, directors and officers, including the CFO and CISO. With CISA also indicating that the U.S. €˜can€„¢t PSA our way out€„¢ of cyber vulnerability and with EU member states developing NIS 2 and DORA regulations. There are indications that regulators are focusing on the role of cybersecurity in managing shareholder value, national and economic security.

The role of CISO is a challenging one, often trying to deliver enterprise wide security to manage an enterprise wide risk, with limited board support, understanding and funding. Whether we like it or not cyber is being regulated and along with regulation comes accountability and responsibility. Regulators see the CISO as the senior Director or Officer, with technical accountability and responsibility for enterprise cybersecurity risk management, on behalf of the board.

CISOs are right to be concerned. But as the SolarWinds Wells Notice alludes, they are not the only executive in the spot light. Cyber regulation is a board governance problem, requiring oversight, assurance and attestation by the board. It won’t just be the CISO putting their name to the regulatory filling, CISOs need help support, education and training to undertake what is now a regulated role, at the board table.

Ted Dziekanowski Stephen Pitt-Walker, JD, FGIA Rachel V. Rose, JD, MBA Jamie Foster

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7079004018747822080