Distributing Security Responsibilities (Responsibly)

July 26, 2024 at 10:01AM Cybersecurity compliance remains a priority for private organizations and government bodies, with new regulations being proposed. While regulations offer leverage for improving security processes, they also increase the burden on chief information security officers (CISOs) to navigate cost containment, trust-building, and compliance. It’s crucial to clarify security responsibilities beyond the … Read more

Risk and Regulation: Preparing for the Era of Cybersecurity Compliance

March 21, 2024 at 09:45AM The text emphasizes the growing significance of cybersecurity risk management and the implementation of regulations to improve cybersecurity standards. It highlights the accountability of senior leaders, the challenges in achieving compliance, and the role of threat intelligence in managing cyber risk. Ultimately, it encourages a positive mindset towards cybersecurity compliance … Read more

Orgs Face Major SEC Penalties for Failing to Disclose Breaches

February 23, 2024 at 01:41PM Companies and CISOs face potential fines from the SEC if cybersecurity and data-breach disclosure processes don’t comply with new rules. The SEC can use various enforcement tools, including injunctions, disgorgement, penalties, and barring individuals from roles. CISOs are concerned about personal liability and executives and companies may face reputational damage … Read more