Call us now:
The statistics from ENISA on cybersecurity investment does not paint a great picture over the adoption of NIS, as EU NIS 2 and DORA head down the road in 2024. It highlights what one could consider worrying trends in cybersecurity risk management funding. NIS 2 and DORA increase the role of management committee in the oversight, assurance and attestation of cybersecurity risk. With the increased frequency, complexity and severity of impact, one would question the need increase the focus on cybersecurity risk management.
With the frequency, complexity and severity of cyber attacks rising significantly, cyber spend is not keeping pace with the need to secure entities (up 0.4% between 2022 and 2021). 47% of survey organizations are not inclined to recruit security FTEs in the next 2 years and 85% claim difficulties in finding talent. Only 42% of Operators of Essential Services (OES) and Digital Services Providers (DSP) subscribe to a dedicated cyber insurance policy.
One suspects that many OES and DSP providers have not yet come to terms with the cybersecurity regulation, least of all proposed in the EU. NIS 2 and DORA require board demonstrate they have undertaken appropriate education Brian D. McCarthy, to enable them to provide appropriate oversight, assurance and attestation of cyber risk. Or risk civil or criminal convictions.
Great, yet worrying, benchmark data on EU NIS Investment 2023 – https://lnkd.in/eYEsixAu
Ted Dziekanowski Rachel V. Rose, JD, MBA Bob Dix
#cybersecurity #cyberriskmanagement #eunis2 #dora
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7131967095604416513