A great article. Be it the gorilla or elephant in the board room, the direction of regulatory travel for cyber is clear; no more carrots and bigger sticks. Cyber regulation and control is another example of Governance, Risk and Compliance…
A great article from HBR, highlighting what boards need to do in setting the cyber risk agenda. Building cyber governance, audit, risk assessment and the need to focus to outcomes such as the risk appetite, customer, shareholder and regulatory expectations.…
The Huawei board has reacted strongly to the shots fired by the US government, in the latest round of trade sanctions from the US. Barring foreign chip manufacturers who use American software and technology from making products available to the…
In these unprecedented times global data protection regulators including the ICO and European Data protection Board, (), have been publishing guidance on the use and management of personal data. In both the ICO and EDPB believe there is enough flexibility…
How should boards look at cyber security risk. Simple messages, growth productivity, M&A. View Original Post
I’m really pleased to report that I have been co-opted as a member of the board of the Security Institute. The UKs largest membership body for security professionals. I will work to support the excellent work which has already been…
Well worth a read. Closing the knowledge, governance and oversight gap for cyber at the board table is an issue which needs to be addressed. I’m not necessarily convinced with the questions, but I am convinced about the sentiment. Cyber…
The board room is a complex place to work. Boards make decisions within complex working environments, markets and regulatory regimes. Cyber security is a complex practice, one which has an organisational wide impact, due to the nature of the enterprise…
A great article to read which I believe sets the direction of travel for board ownership and director and officer liability for the management of cyber security. I do caveat that I am not a lawyer, just a lowly cyber…
I ran a board round table at Rialto last week on Securing corporate value, we discussed; Complexity – Cyber risk is complex, do boards understand it? We discussed – Cyber is a very complex risk, cyber threats, organisations, cyber security…
