article thumbnail

Best Practices Q&A: Guidance about what directors need to hear from CISOs — from a board member

The Last Watchdog

CISOs can sometimes be their own worst enemy, especially when it comes to communicating with the board of directors. Related: The ‘cyber’ case for D&O insurance Vanessa Pegueros knows this all too well. She serves on the board of several technology companies and also happens to be steeped in cyber risk governance.

CISO 210
article thumbnail

How to find, fund and fix cyber risk blind spots

SC Magazine

Today’s columnist, Sean McDermott of RedMonocle, says that companies should use the NIST 800-53 security and privacy controls to help find cyber risk blind spots. The rapid, overnight shift exposed new cyber risk blind spots and gaps unknown to security leaders or executive teams. Credit: NIST. FIX the cybersecurity gaps.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

3 biggest cyber risks from the Ukraine-Russia conflict

CSO Magazine

The invasion of Ukraine by Russia is reason enough for all CISOs to place their teams at a heightened state of alert and readiness in the event of deleterious cyber actions by nation-state actors or the cybercriminal groups. preparing offensive cyber measures?

article thumbnail

NEW TECH: CyberGRX seeks to streamline morass of third-party cyber risk assessments

The Last Watchdog

So they began inundating their third-party suppliers with “bespoke assessments” – customized cyber risk audits that were time consuming and redundant. Kneip also painted the wider context about why effective third-party cyber risk management is an essential ingredient to baking-in security at a foundational level.

article thumbnail

Annual Reports: How They Warn of Cyber Risk

SecureWorld News

On page 34 of the report, Accenture dives into the risk that cyber poses to the business. The section on cyber risk is in bold: "We face legal, reputational and financial risks from any failure to protect client and/ or Accenture data from security incidents or cyberattacks.". That's where the fine print comes in.

article thumbnail

Thousands of Data Center Management Apps Exposed to Internet

eSecurity Planet

Tens of thousands of applications that are critical to the operations of data centers around the globe are exposed to the internet, with many secured with default factory passwords, posing a significant cyber risk to enterprises worldwide. This is laziness at its worst.”. See also: Top IT Asset Management Tools for Security.

Internet 117
article thumbnail

2021 Security Outcomes Study: Stress Relief for CISOs

Cisco Security

This affected all levels of the cybersecurity landscape, and it has had a particularly broad impact for those in the C-Suite, specifically, the Chief Information Security Officer (CISO). So, what is an already over-stressed CISO to do? For example, the Internet of Things (IoT) will grow to include the entire agricultural industry.

CISO 94