Call us now:
The former Uber head of security is on trial in the U.S having been charged with obstruction and hiding a felony from authorities, following Ubers 2017 data breach. At the time the Federal Trade Commission (FTC) were investigating the 2014 data breach.
With the EU and U.S moving forward with cyber risk regulation the pressure on security professionals will only increase. Challenging their professional standards, their decision making and the actions they took.
As an individual that has built and led both 1st and 2nd line for cybersecurity and risk oversight in regulated markets, I can attest that cyber and risk management are complex legal and regulatory programs. As complex as the IT systems and data an organisation manages, the threats facing the firm, the remedial actions put in place to manage risk and the legal and regulatory environment in which it operates and importantly the knowledge and experience of the board.
As more legal precedence is created the role of the security professional will get harder, at a time when people are leaving the market and we cannot get enough talent to fill the gaps. Security professionals need to be aware of the legal and regulatory risks that are coming over the horizon and their obligations to shareholders and regulators. Build strong relationships with general counsel and regulatory affairs, as many CISOs are not siting at the board table yet. Boards also need to be aware that they will be put under intense regulatory pressure to justify their cyber knowledge and experience, and the decisions that they made to manage cyber risk.
The Uber case is another that will set precedence for the security community. But if we take the kings shilling we cannot be surprised by the outcomes.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #cyberlegal #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6973541019531280384