Call us now:
Thank you Ted Dziekanowski for posting. Today will be a challenging day for the security community as the Uber CSO is sentenced, the outcome of which may set precedence for cyber professionals globally. The DoJ sentencing memo was considered, reflecting a balanced view of the situation Uber found itself and decisions made at the time of its 2017 hack. While the trial has caused alarm for security professionals globally, we must remember that the role of the security professional is a critical one for companies, even though it has not always been given the due recognition or consideration by boards.
Depending on the outcome, the sentencing may send a strong message to company directors, officers and CISOs as to the importance of cybersecurity risk management, legal risk and regulatory compliance. It may demonstrate that if we want to be considered as cyber professionals, then we must all accept that the role comes with accountabilities and responsibilities from the board room down.
As lawyers, accountants, auditors, engineers and doctors are recognised as professionals and held to a higher bar of accountability than the guy, or girl, on the Clapham omnibus. The role of the CISO is only going to become more significant as U.S and EU regulators start the process of implementing cybersecuirty risk management regulation. Regulation that will affect security professionals and board members, as they are required to demonstrate adequate oversight and assurance of cyber security risks.
Stephen Pitt-Walker, JD, FGIA Rachel V. Rose, JD, MBA Jamie Foster
#cybersecurity #cyberriskmanagement #uber #cyberattack
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7059871891489972224