Call us now:
We can demand all we want, but there’s no mechanism in place to get any board to implement cybersecurity risk management in the UK. While ‘It’s time to act’ on cybersecurity, as is the message from the UK National Cyber Security Centre in their 2025 annual review of cyber. Government ministers and CEOs should get behind the NCSC message that cyber is a boardroom priority. There are no teeth to bear to enforce cybersecurity.
The report makes for an interesting read. One has to remember that the UK does not require companies to report cyber incidents, nor mandate the management of cybersecurity risk, as some of our partner nations require. The cyber attacks in 2025, such as Marks and Spencer, JLR, the hack affecting Heathrow airport, and yesterday’s report of cyber attacks by nation states stealing government secrets, highlight issues in the UK cyber strategy.
The report highlights the importance of cyber resilience to enable the UK to withstand and recover from cyber threats. Highlighting the importance of board accountability and responsibility. Veritas GRC has published CLE-accredited programs on Board governance over cyber risk and Board Governance over AI with The Government of Dubai Legal Affairs Department and Board governance over NIS 2. We will soon publish a program on Board Governance of CMMC, a regulation that affects the global Defence Industry Base.
Whilst the actions of the UK are important, its allies and partners already regulate cybersecurity risk management in the boardrooms of CNI providers, Financial Institutions, and Defense Contractors and subcontractors. The UK is behind the wave of cybersecurity compliance.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Bryan Foss
https://lnkd.in/eSFg9Ztc
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7384496883055947776