Tagged: cybersecurity

10 Jul, 2023

Webinar: Cybersecurity and Compliance — A New Path Forward

Webinar: Cybersecurity and Compliance — A New Path Forward July 25, 2023, 12 Noon EST Sign-Up Here Companies face a broad array of cybersecurity risks — from internal actor mistakes to sophisticated ransomware attacks. Chief Information Security Officers (“CISOs”) are being asked to mitigate these risks. Luckily, Chief Compliance Officers (“CCOs”) have become natural partners for CISOs, and are collaborating to design and implement effective governance...

General

22 Aug, 2022

New York’s Department of Financial Services Proposes New Cyber Compliance Requirements

The New York Department of Financial Services (“DFS”) has proposed rule changes to increase cyber compliance requirements. DFS has been the leading regulatory force in the cybersecurity industry. DFS first issued comprehensive cybersecurity rules in March 2017. Many other regulators and international organizations have adopted many of these regulations as best practices for cybersecurity requirements. The proposed rules would impose some significant requirements, including: Expansion...

General

9 Jun, 2021

Cyber Incidents Underscore Absence of Real Private Sector Cybersecurity Standards

Sometimes it takes a public event to remind corporate risk managers about the importance of effective risk management. While corporate risk management functions have become yet another “hot” topic or new-fangled response to corporate failures to prevent obvious risk, most organizations continue to wander in the world of reactive business planning rather than proactive prevention. It has been fairly obvious for years that most corporate...

General

24 May, 2021

Cybersecurity Oversight: A Board Challenge

Corporate boards face exponentially escalating risks – at the heart of this development is the rapid escalation of board member accountability. Board members are no longer operating in a sinecure, free from legal risks. The walls are changing. A perfect example of the changing landscape of risk is the importance of cybersecurity oversight and protections. The criminal cyberattack against the Colonial pipeline and the acknowledge...

General

9 Mar, 2021

The SolarWinds Cyber-Attack – The Devastation and Wreckage

The SolarWinds cyber-attack was devastating in scope and impact. If any lesson can be learned from this event, the SolarWinds case presents all the pitfalls, enforcement and reputational damage, rolled into one tragic series of events. In a recent 10-K disclosure, SolarWinds announced that it is the subject of ongoing investigations conducted by the Department of Justice, the Securities and Exchange Commission, and various state...

General

13 Aug, 2019

Cybersecurity Threats, Data Privacy and the Important Role of Compliance

Most compliance officers will admit that they have more than enough responsibilities in their purview. They are usually not looking for more. I have some bad or good news on this front depending on your perspective. As companies struggle with cybersecurity and data privacy issues, companies should naturally turn to compliance to play a larger role in overall risk mitigation strategies. Up to now, it...

General

21 Feb, 2018

The Obvious Partnership — Compliance and Cybersecurity

Cybersecurity compliance, like the compliance profession, is rapidly growing. The forces pushing cyber compliance are two-fold: the ever-increasing and changing nature of cyber threats and harms, and the logical application of compliance strategies. Compliance has to work closely with in-house corporate information technology. To the extent a company outsources information technology to a cloud provider, compliance will serve an even more important function in coordinating...

General

14 Feb, 2018

Planning for the Perilous Consequences of a Data Breach

The nightmare scenario for corporate boards and senior executives revolves around the impact of a major data breach. We have seen this first hand with Equifax, Anthem Healthcare, and Target, as prime examples. In the Equifax case alone, it is estimated that approximately 140 million individuals had their information hacked in the attack. It is easy to understand, in these circumstances, that a company can...

General

30 Jan, 2018

Cybersecurity Compliance for Financial Institutions

The New York Department of Financial Services has adopted detailed cybersecurity regulations for financial institutions. (Here). The NYDFS has filled a vacuum created by the failure of the federal government to act in this important area. Congress has failed to enact any specific requirements; the federal government continues to rely on voluntary efforts and recommended standards. As long as this vacuum continues, state regulators and...