As we have noted in previous articles, governments worldwide are increasingly taking a regulatory approach to cybersecurity risk management where the onus is placed on the management of cyber risk by businesses and their boards.
This requires organisations to proactively put in place frameworks and programmes to manage cybersecurity risks and to ensure compliance with regulatory reporting requirements. The widely adopted ‘it won’t happen to me’ approach to cybersecurity and reliance on cyber insurance to manage the cost of a cyber attack are no longer realistic options.
We are pleased to attach a link to a White Paper produced by Andy Watkin-Child of Parava Security Solutions which outlines how organisations should tackle compliance at board level.