Thank you for post Gerry Kennedy. We’re not talking about anything new, as you rightly point out Y2K came and went, regulations come in and get

← Back to Blog

Thank you for post Gerry Kennedy. We’re not talking about anything new, as you rightly point out Y2K came and went, regulations come in and get enforced and boards have to face up to managing different risks today than yesterday.

But here’s the rub with cyber. We all talk about cybersecurity and risk management, yet we have all the pieces in place to build the jigsaw puzzle that cyber regulation is going to paint for us all. But we have no solution for delivering it, it’s not education, it’s not technology, it’s not culture, it’s not policies, it’s not processes, it’s not procedures, it’s not regulation, it’s not insurance, it’s not organizational design, and its not people? Cyber is a complex enterprise wide risk.

If and when regulators enforce cyber compliance (‘left of bang’) it requires solutions that bring together all of the above. If cyber regulatory enforcement makes its way to the court room then the factors above are likely to get used in deciding personal and corporate liability and that’s before a successful attack.

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #cyberlegal #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7000796368994738177