Call us now:
Why does one feel like Cybersecurity risk transfer remains firmly rooted ‘Right of Bang’ with insurers, when regulation now moving across the EU is transfer the risk ‘Left of Bang’.
When one read the measures and metrics insurers use to evaluate cyber risk one puts ones head in one hands. It’s as though that it is possible to evaluate an organisations cybersecurity maturity from a small group of markers and make a judgement on an organisations cybersecurity. Or be able to evaluate and correlate between measures, as though there are defined relationships. It feels as though we live in hope that by measuring 5 things for cyber, it’s all going to be OK……..
If it were all so simple the EU would not have made a decision to regulate cybersecurity for CNI, including manufacturing. ENISA would not have needed to publish its technical guidance for NIS 2. Setting out a broad controls to meet oversight and assurance requirements under NIS regulation.
What is always of interest when one views industry research on cybersecurity is the lens through which it is viewed.
Cybersecurity risk management is a risk transfer paradigm that balances both ‘left and right of bang’ risk management between proactive and reactive risk management solutions. As the boards of manufacturers in the EU are starting to find out.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC Aon
#cybersecurity #cyberriskmanagement
https://lnkd.in/e9iEz6yH
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7362036480648650752