Cybersecurity incidents like ransomware can potentially bring operations to a standstill. Recent regulatory changes by the FTC and proposed changes by the SEC show that both agencies are drafting cybersecurity rules similar to ERM concepts. This would include board oversight of cybersecurity and the responsibility of senior management to implement cybersecurity policies and procedures and provide training for information security staff that is sufficient for them to address relevant security risks. In addition, this could mean that your organization may be required to report incidents and disclose cybersecurity policies and procedures.
Tune in to this ISACA Podcast episode to listen in as Cyber Defense Labs’ Manager of Cybersecurity Advisory Services Tom Schneider tells ISACA’s Jeff Champion that any threat to this essential information is an enterprise risk that needs to be managed by the enterprise through teamwork, with leadership from both the board and senior management. Tom also gives insights into managing cybersecurity risk as an enterprise risk.
To read Managing Cybersecurity Risk as Enterprise Risk, please visit: www.isaca.org/managing-cybersecurity-risk-as-enterprise-risk.
To listen to more ISACA Podcasts, please visit: www.isaca.org/podcasts.
Rethinking Identity Governance
2023: The Year of Risk
Improving Cyber Resilience in an Age of Continuous Attacks
Advancing Digital Trust Through Audit and Assurance
ISACA Live_Critical Infrastructure Security
ISACA Live | Risk Scenarios
ISACA Live | How to Mature Your Privacy Compliance Program
Career Coach Advice: How to Launch Your IT Audit Career
ISACA Live | Advancing Digital Trust Through Data Privacy
ISACA Live | The Dark Future of Privacy
Information Privacy Contradiction: Interest-Based Posture of Compliance and Violation
ISACA Live | Advancing Digital Trust Through IT
Should Cybersecurity Be Subject to a SOX-Type Regulation?
Beware the Traps of Data Governance and Data Management Practice
Convergence: Where Next?
Do Data Go To Waste
Protecting Your Enterprise and Deterring Fraud in a New Risk Era
The Circle of Failure: Why the Cyber Security Industry Doesn’t Work
Meeting Attackers Where They Are
Taking Security Strategy to the Next Level: The Cyber Kill Chain vs. MITRE ATT&CK
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast