Don’t focus on regulatory compliance
Don’t let your concerns about regulatory compliance distract you from the more urgent risk of a cyber attack
Cyber 321: 27th January 2023
Cyber 3-2-1: PayPal and Norton breaches, predictions of imminent cyber catastrophy, and taser-equipped drones. What more could you ask for?
Regulation drives action
CEOs believe regulation drives an improvement in cyber resiliience. So, it’s an opportune time to introduce NIS2 and DORA.
A potential conflict of Interest
Why gathering data points about the health of your cybersecurity defences can lead to a conflict of interest, and ways to address this.
Accountability: What gets measured gets done.
What gets measured gets done
One way to make sure cybersecurity is being managed appropriately.
If you are accountable for cybersecurity, but rely on others to manage it on your behalf, how do you make sure they aren’t making a mess of it?
Accountability
Let’s talk about accountability. The concept that even if you don’t do a thing, you are still accountable for the the thing.
Cyber 321: 13th January 2023
Cyber 3-2-1: This week, there’s one for everyone in the audience, including the board of directors and anyone who relies on an IT MSP to manage their cloud systems. The two numbers this week remind us why invoice fraud is so rampant – Because that’s where the money is! The thing to think about this week? Take two minutes to find out your cybersecurity score.
Ransomware attack: What’s your policy?
If you suffered a ransomware attack, would you pay the ransom? And has this policy been signed off by the exec team and board of directors?