Call us now:
One agrees that the private sector has, for too long, not put the necessary focus on cybersecurity. But as with many nations, cybersecurity has not been driven by governments with a focus on cyber as a national security issue. Cyber has, for too long, been treated as an issue that the private sector can address alone.
The UK industry has many national and international examples of cybersecurity failures to consider, yet the private sector has not adopted cybersecurity as the UK government would like. Why, the private sector cannot manage cybersecurity as long as it is conflicted between profit and security.
Dr Florian Meier, UK industry faces the same dilemma all industries face, that is, balancing profit with security. Unless a consistent and reasonable message is presented to corporate boards, profit will invariably win.
As discussed recently by Tim Haugh, cyber is a threat to national security, and a threat that feeds economic and societal security. Issues that public sector boards generally do not focus on, as it is the purview of governments. As demonstrated by the JLR hack, the UK government acted as an insurer of last resort to protect the UK industry, creating a moral hazard for the government.
https://lnkd.in/eSYDaeFB
These are reasons why EU and US regulators focus on cybersecurity of CNI, health, Financial Services, and Defence cybersecurity. The private sector alone cannot manage the risk unless it is given the correct steer by the government.
Veritas GRC has developed a range of board governance programs for cybersecurity. Setting out the governance, oversight, and assurance of cyber risk, in line with US and EU cyber regulations.
https://lnkd.in/g629bx9h
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
#cybersecurity #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7383866332565393409