There’s are a couple of FUD debates in cyber, one is that people will only start to listen when cyber kills someone.

← Back to Blog

There’s are a couple of FUD debates in cyber, one is that people will only start to listen when cyber kills someone. The other is cyber will get implemented by boards when board members face civil or criminal penalties.

For point 2, the EU introduced the opportunity for EU member states to introduce civil and criminal penalties for board compliance to EU NIS 2 and DORA. For point 2, it seems that the NHS cyber attack against Synnovis resulted in at least one patient death. Caused in part by the patient’s delayed blood test results.

One wonders how the criminal investigation into the cyber attack will evolved if the death can be related to the cyber attack. Is that when the legal debate on cybersecurity risk management starts?

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC NHS

#cunersecurity #cyberriskmanagement #cyberattack

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7343905283615735809