Will Officers & Directors Be Held Legally Responsible for Companies’ Data Breaches and Cybersecurity Incidents?

Will Officers and Directors be held legally responsible for their companies’ data breaches and cybersecurity incidents? That is the question I addressed in Cybersecurity Risk: Law and Trends – A Director’s Duties Must Evolve With The Company’s, which was recently published in the Spring 2015 issue of Ethical Boardroom (see article below). The article is short …

Boards Had Better Start Paying Attention to Cybersecurity

Yesterday Forbes featured an excellent article that explained why it is important for companies to create Board-level committees to focus exclusively on the issue of cybersecurity. Here is just a teaser but I encourage you to read the entire article. Step one for every board is to understand that it is supposed to be offering oversight on …

#SonyHack: Will Executives’ Embarrassing Emails Better Motivate Cybersecurity Change?

Sitting in the Miami airport at 5:00 am I am reading news updates on the #SonyHack and a thought just occurred to me: Previously, many of us preaching the “you better take your company’s security seriously” message to the C-Suites have been wondering if it would take a court decision finding C-Levels or Board members …

#SonyHack shows there are no “safe secrets” in the corporate world – what do you do?

The #sonyhack will change the way the corporate world operates in many ways that we cannot even yet imagine. Yes, there are obvious data security implications that I usually drone on about, but there is another change that we may see come about. The now outdated idea that internal corporate secrets will remain corporate secrets. You know, …

3 Steps the C-Suite Can Take to Strengthen Cyber Security

Executives of Public Companies Must Use Caution With Social Media – The SEC is Watching!

Are statements made by executives of publicly traded companies via social media held to the same standard as statements they make in any other limited environment when it comes to material information about the company? Absolutely, here is why …  Just this past week news broke that the Securities and Exchange Commission is considering bringing a …

Cybersecurity risk — think its material? (hint: the SEC does!)

That’s right — the Securities and Exchange Commission has determined that risks associated with cybersecurity can be material enough to require that they be included in companies’ disclosures. The SEC issued a disclosure guidance on October 13, 2011 to alert companies that these risks may fall within their existing disclosure requirements. In other words, what …