What we don’t know is what oversight the board had over cyber, what we do know so far is that AT&T filed an 8K Form to the SEC ( this week…

← Back to Blog

What we don’t know is what oversight the board had over cyber, what we do know so far is that AT&T filed an 8K Form to the SEC (https://lnkd.in/eeekE7TP) this week highlighting that a threat actor accessed and copied AT&T call logs between April 14th and 24th 2024. Identifying that call and text logs of early all of AT&T’s wireless customers and customers of mobile virtual network operators (“MVNO”) using AT&T’s wireless network between May 1st and October 31st and January 2023. (8K)

If the attack is confirmed to be through SnowFlake (https://lnkd.in/e7BV-bFf), then its a further example of another cyber attack against a customer of a third party vendor. Highlighting the increased threat of third party cyber attacks and raises challenges over the oversight, assurance and ultimately governance of cyber risk for corporate board Faisal Khan.

Cloud is a significant risk for all companies. The move to cloud whilst delivering many benefits also creates risks, least of all third party supplier risks. Risks that should be on the boards radar, with oversight, assurance and attestation through the boards committee structures across the risk, audit, finance, cyber committees. One would add that boards should be considering a ‘third party supplier committee’ until there’s clarity over third party supplier management risk.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagemen #cyberthreat

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7218186605684027392