Whitepapers
CISOs and Personal Liability
How not to be singled out by the SEC and your board
When a breach occurs, the buck still stops with the CISO, making them increasingly nervous, asking: “Who has my back?”
To minimize CISO personal liability, developing a defensible risk practice based on real-time telemetry, standards, and quantification for communicating with boards and regulators and demonstrating continued improvement is crucial.
- Establish cybersecurity as a business risk by quantifying it in dollars
- Ensure holistic visibility into enterprise risk
- Define an acceptable cyber risk appetite with C-Suite & the board
- Broadly cultivate champions across your Board, C-Suite, and key stakeholders
- Create a transparent and defensible strategy
- Have a Well-documented and Disciplined Security Program
- Build A Rock-Solid Fall Back