Call us now:
The road ahead for the board room and cyber looks bleak. Recent events with the SEC and SolarWinds, Uber CSO, Drizzly and Vastaamo; the increase in Frequency, severity and complexity of cyber attacks and developments in cyber regulations in the U.S, EU and Australia sets out a complex picture of compliance. Requiring boards to address and attest to cybersecurity risk management, or face regulatory oversight with the potential for civil and criminal penalties.
It makes the output from the enclosed HBR paper of concern, highlighting the continued disconnect between boards and cybersecurity. If cyber regulation continues on the current trajectory, then the disconnect between boards and cybersecurity will likely leave board members personally exposed.
The paper highlights challenges that have not changed over the past 10 years. Recognizing that boards do not have the cybersecurity knowledge or experience to manage the risk, that if continue unchecked expose boards to regulator oversight, civil and criminal liabilities and action from stakeholders.
Cyber is a board risk, a national security concern and one that U.S, EU and Australian regulators are now focused on addressing. One has presented to many stakeholders, setting out the direction for cyber regulatory oversight and requirements for board oversight, assurance and attestation of cyber risk. Required by cyber regulators as cyber develops from cybersecurity to cyber risk management (https://lnkd.in/eVgsGpyx)
Reach out lets talk.
Ted Dziekanowski Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA Jamie Foster
#cybersecurity #cyberriskmanagement #cyberlaw
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7081520847395377152