Call us now:
There are few metaphors that you can use to describe a cyber attack and its fall out. It’s a unenviable position to be in when one suffers a cyber attack, least of all if the organisation is not prepared and not implemented appropriate cybersecurity risk management processes or controls, resilience and incident management.https://lnkd.in/dCqfidX7One has to consider that the retail sector is well documented as being a poor brother in the cyber spend and resilience stakes; ransomware events are the least pleasant form of cyber attack, especially if a threat actor can gain access to broad swathes of the estate and encrypt it; it is fair to say at best the UK has lax cyber regulation, and worst UK companies lack steer from government on cyber best practice, whose emphasis has been on offensive rather than defensive cyber strategy for UK plc. This comes at a time when cyber is a top 4 cyber risk in the board room. Finally the board, one sees no cyber, resilience, cloud, data or AI experience sitting around the board table. Who is steering cyber risk management, maybe the audit and risk committee?https://lnkd.in/dj9bwZTmCyber is a complex enterprise wide risk, as we maybe seeing with the M&S attack. Whose effects can lead to permanent irreparable damage to a organisation, without deep pockets. Demonstrated by last years attack on United Health, who rebuilt all its systems, to clear out the threat actor, that sort of exercise does not come cheap (UnitedHealth spent $872 million in the first quarter of 2024 related to the data breach).@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Bryan FossVeritas GRC Marks and Spencer#cybersecurity #cyberriskmanagement #cyberattack
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7323235633500418048