The Australian government has released guidelines setting expectations for company Chairs and Directors to govern, respond and recover from a cyber…

← Back to Blog

The Australian government has released guidelines setting expectations for company Chairs and Directors to govern, respond and recover from a cyber incident. Expectations that are in line with Action 5 of the 2023-2030 national cyber strategy.

Providing clear guidance to industry the guidance sets out expectations of company directors for governance, oversight and assurance in response to and recovery from a cyber crisis; the role of government support and assistance; the role of third parties; and the need for appropriate legal advice and support to enable boards meet their legal obligations.

One has said many times that cyber regulatory compliance is built on the management cybersecurity and legal risk. To ensure boards appropriately oversight, assure and attest compliance through board governance. The Australian government along with the EU and U.S have started to regulate board governance of cybersecurity risk management and set the bar for company directors to demonstrate their compliance to cyber regulations. At risk of civil or criminal penalties (e.g. see EU NIS 2).

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7168520994620452865

Categories

Cybersecurity, Governance & ESG, Regulation & Compliance

Tags