UUMMMM….Brian D. McCarthy, there’s few column inches on the appointment of the US National Cyber Director by the President.

← Back to Blog

UUMMMM….Brian D. McCarthy, there’s few column inches on the appointment of the US National Cyber Director by the President. As the appointee Sean Cairncross is a lawyer and not a cyber person. Now there a couple of trains of through that go through my mind when I think about this and it leaves me a little conflicted.The first is that the head of cyber should be a cybersecurity expert, as they will bring cybersecurity expertise to the job and an understand of what cybersecurity is and what is needed to manage cybersecurity risk. But does such a person exist? You could take a CEO from a cyber tech company; they maybe stuck in a tech vertical; be customer facing and not involved in running a cyber function; or if they are in a cyber function they may have no leadership experience at the level required to manage nation state cyber. Lets also not forget the political dimension of the role. All this cuts the pool of potential candidates down.The other side says that as cybersecurity is changing and becomes more regulated, placing the ownership of cybersecurity risk management into the boards of covered companies and Federal Agencies. It is becoming a legal and compliance issue to resolve. Pushing the spot light of cybersecurity risk management to members of management committees, lawyers and cybersecurity professionals.So does it make sense to have a lawyer as the head of the national cybersecurity? Today one believes that it’s more appropriate to have a lawyer as the head than someone who has a cybersecurity background. Cyber is rapidly becoming a national, economic and society security risk. It should be seen through a broad lens, as the implications of failing to manage cybersecurity has broad and deep consequences, least of all those related to fixing cybersecurity problems.@Thaddeus Dziekanowski Faisal Khan Rachel V. Rose, JD, MBAVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation #nationalsecurity

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7295736441920278528

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags