Call us now:
Thank you Bob Dix for sending this.
An Amicus brief has been filed by cybersecurity leaders opposing the SEC action against the SolarWinds CISO. The brief argues that CISOs play an indispensable role in national security and cybersecurity, and that the SEC’s action threatens to undermine the flexibility needed for CISOs to effectively triage cybersecurity risks.
One is struggling with this. One has been a CISO and a global leader of cyber risk, a councel appointed cyber expert and witness of high profile cases and our work has been presented to ONCD, the DoD and others. Istruggle because what do CISOs want? If you want a seat at the board table, then that comes with accountabilities and responsibilities. The case against SolarWinds is based on evidence from the company, to be tested against a compliance baseline.
The SEC is a regulator, it only evaluates compliance to existing rules, to protect investors. Isn’t that the role of every professional around the board table and the CISO?
One wonders if the biggest problem with cyber is that CISOs aren’t recognised professionals, they genetally require no qualifications to manage cyber risks of $multi-billion companies. Yet lawyers, accountants and auditors require professional qualifications to take on the professional responsibilities of their roles.
If we security professionals want recognition and professional respect then we have to play by the same rules as our peers. Only this week I conducted a Chartered Security interview for a candidate looking for submission to the UK Register of Security Professionals.
Cyber is a legal and compliance problem, whether we like it or not.
Ted Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberlegal
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7159511147530829825