Call us now:
The public and private sectors face a problem, and its a problem that in part is of its own making. That is cybersecurity risk management, regulatory compliance, and the management of the resources necessary to mitigate legal and compliance risk.
Many surveys point to the lack of board knowledge, skills, and experience to manage cyber risk. The recent update by Heidrick & Struggles is one such survey. In ones opinion it reflects the views of board members as they relate to cyber. Highlighting cyber risk as a top 4 topic taking up board time.
https://lnkd.in/eaFGSSs2
So why are CISOs actively looking to leave their jobs. With increases in cyber regulation it’s in the interest of boards and security professionals to work to deliver security solutions. Least of all as cyber regulation, and the fall out from cyber incidents have a tendency to follow both an organisation and those involved in the oversight, assurance and attestation of cybersecurity around. No matter where you go. As has been demonstrated by the SolarWinds vs. SEC case. The pesky Wells Notice and corporate emails reared their heads several times in the media.
Also if the enclosed article is correct and CISOs, CIOs and CSOs only stick around for 18 – 24 months on average, how will boards ever demonstrate oversight, assurance and attestation of cyber risk. Is the board of a regulated entity going to rely on a vCISO to manage cybersecurity risk and compliance. If they have ‘no skin in the game’……………..no. Also a vCISO carries the same regulatory and legal risk.
Cyber is not a FUD debate. Boards need to grasp the cyber nettle whether they like it or not, or they may find themselves facing civil or criminal charges for failing to comply to cyber regulation. As may the CISO.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Rachel V. Rose, JD, MBA
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberattack #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7260347886649982980