One raises an obvious question, why would the CISO be defining a material risk from a cyber incident?

← Back to Blog

One raises an obvious question, why would the CISO be defining a material risk from a cyber incident?

Also as this article demonstrates, the issue isn’t one of determining material risk from cyber incidents. It’s managing material cyber risks. Risks that are not all the responsibility of the CISO to manage.

Corporate Governance places the responsibility on the board to manage and report material risk.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity ##cyberriskmanagement #governance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7197547452403466240