Business leaders are beginning to understand that cyber is not just an IT issue, a legal issue, or any other silo-ed issue, but that it is an overall business risk issue and that makes managing cyber risk a team sport.
This week I had the privilege of moderating a panel discussion that was titled “Sharing the Load: What are Chief Privacy Officers, Chief Information Security Officers, and General Counsel Doing in Real Life and How Do They Work Together with Outside Firms to Divide Up Roles and Responsibilities?”
For this discussion we had these amazing panelists sharing their unique industry expertise:
- Manoj Satnaliwala, Head of Audit, Caliber Home Loans
- Dr. Anand Singh, Chief Information Security Officer, Alkami Technology, Inc.
- Jillian Welch, Privacy Officer and Deputy General Counsel, Oklahoma Health Care Authority
- Jarrett Kolthoff, CEO, SpearTip
Our objective was to help the attendees understand that since cyber — one of the greatest overall risks that businesses face — is an overall business risk issue, it takes a team of many different stakeholders within and outside of the organization, working together as a team, to effectively manage this risk, and to help them understand how those stakeholders should all work together. We covered these main topics:
-
Who is on the team, both internally and externally?
-
What are the various players’ roles?
-
How do the players communicate and collaborate together?
-
How does the team play well together, overall, and who is the head coach?
-
How do the players share and divide up responsibility for cyber risk?
-
Who is involved with procuring appropriate cyber insurance and ensuring you can use your favorite outside vendors?
-
Who ultimately owns incident response planning and preparation?
-
Who takes the lead when the bad stuff happens?
Many thanks to these outstanding speakers and to The Center for American and International Law for providing us with the opportunity to present this very important information at its outstanding 3rd Annual Cybersecurity & Data Privacy Law Conference, I am already looking forward to next year’s conference!
