When is a cybersecurity incident “material”? Nobody knows, but the SEC now requires public companies to report them—and to note any known risks that may be present in a company’s operating environment, specifically including third-party risk. For CISOs, this is akin to an unpinned grenade: If there’s a “material” cybersecurity incident, or an undisclosed risk, there are personal repercussions: lawsuits and potentially even jail time. What should CISOs be doing in light of this changed environment?
With Your FinServ Tech Oracles:
• Johna Till Johnson, Nemertes CEO + Founder & Content Committee Chair for the Wall St. Technology Association (WSTA)
• Jerald Murphy, Nemertes Senior VP of Research + Consulting
FinServ Tech Oracles – a weekly video series for FinServ technologists. We talk about the latest technology trends that affect financial services firms (in our best imitation of the Oracles of Delphi…) Brought to you by Nemertes.