We have a crisis in cybersecurity knowledge, skills and experience; we have an environment in which security professionals cannot work; and we’re…

← Back to Blog

We have a crisis in cybersecurity knowledge, skills and experience; we have an environment in which security professionals cannot work; and we’re introducing cyber regulation that is going to increase workload, require new competencies from the board room to the shop floor and place legal and regulatory oversight over covered entities. Adding to the already significant stresses security professionals face.

As cyber regulation increases, security professionals face increased pressure to attest regulatory compliance. One must remember that security professionals require no professional qualifications to do the job. Qualifications their peers are expected to hold (legal, Accounting, audit). Yet security professionals are expected to take on a role that requires them to undertake responsibilities they are not prepared for; make decisions they are invariable not qualified to make (not necessarily their fault – aka ‘are we secure’) and take on stress and pressure that they should not. At the same time we are facing a cybersecurity skills gap (https://lnkd.in/e9-8QaBj)

How do we square this circle?

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7200438618291666944

Categories

Cybersecurity, Governance & ESG, Regulation & Compliance

Tags