The conversation in the media is starting to change, as the realization of cybersecurity risk management regulation, regulatory oversight and legal…

← Back to Blog

The conversation in the media is starting to change, as the realization of cybersecurity risk management regulation, regulatory oversight and legal action dawns.

The challenge for CISO is not one of cybersecurity, its now one of cybersecurity risk management, regulatory compliance and possible legal action. The United Healthcare Congressional committee hearings this week demonstrated the national security implications of failing to manage cybersecurity risks. That will lead, one is sure, to further regulatory oversight of United Health Cybersecurity.

Working with attorneys and auditors one is acutely aware of the legal and regulatory challenges ahead for CISOs and boards, and the very fine line they are now required to walk. One does not envy them having a seat at the board table, it won’t be ‘all sweetness and light’.

We at Veritas GRC wrote our board and cyber risk education program working with lawyers, auditors, cyber and risk professionals. Recognizing that cyber is a legal, regulatory and compliance challenge requiring boards to access a range of expertise that includes these professionals. Necessitating CISOs to be very aware of risk management, cybersecurity, and their legal and regulatory compliance obligations, that today they are not.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7192118142632951810