Call us now:
Thank you for posting Ted Dziekanowski.
CISOs should not be roiled with the action taken by the SEC against SolarWinds. The SEC has the obligation and regulatory duty to oversight and assure corporate management of material risk, and it has managed Sarbanes Oxley for the past 20 years. A CISO of a U.S listed company under the Jurisdiction of the SEC will have been involved in the oversight of both. One would argue that they have always had a fiduciary responsibility to their organisation. It is not yet clear that the CFO and CISO are the only Directors under investigation.
What the SEC notice demonstrates is things are changing. Regulators are focusing on the oversight and assurance of cybersecurity. That cannot be avoided, as cyber is rapidly becoming a national and economic security issue. That will expose the cybersecurity risk management of covered entities.
CISOs should not be ‘roiled’. Now is an opportune time to work with the board room who are also being held accountable, to demonstrate reasonable and appropriate cyber security risk management. It is not possible to secure everything, but it is possible to demonstrate that reasonable action has been taken to manage cyber risk.
Updated link : https://lnkd.in/eVRexadD
Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7079707436655226880