Call us now:
Thank you for posting Ted Dziekanowski. The SEC proposal is one of several recent cybersecurity risk management Directives, Acts and proposals submitted by U.S and EU regulators in the 1st and 2nd quarter 2022. That include the requirements for cybersecurity risk management strategy, governance, oversight and assurance that one assumes has been by design and not happenstance.
The regulatory cyber worm is starting to turn and will increase the pressure in the board rooms of public companies and critical national infrastructure suppliers. At a time when the skills and experience to provide board room support for cybersecurity risk management can be counted in very low figures. Especially when boards will have to attest their own skills and experience to regulators and attest their companies cybersecurity compliance, governance, strategy, risk management frameworks and cybersecurity practices. With the legal risk rising as fast as legal cyber and compliance precedence is set in the court room.
One must remember the is a world of difference between cybersecurity compliance and cybersecurity risk management compliance, as a 1st and 2nd Line of Defence practitioner will attest.
#cybersecurity #cyber risk
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6975055901560868864