What role should NEDs play in cybersecurity? - Waystone

      What role should NEDs play in cybersecurity?

      Waystone Compliance Solutions’ Chief Information Security Officer, Conor Flynn, was recently featured in an Assured article where he provided insight into what role NEDs (non-executive director) should play in cybersecurity.

      “We are not expecting NEDs to be cyber experts,” Conor states, “in the same way that a NED on the Board of a pharma company is not expected to have a master’s degree in Chemistry.”

      Conor continues to point out that it is often said that the measure of any well-run business is in how it responds to, and deals with, a problem. When it comes to cybersecurity problems, and don’t forget that ‘when not if’ mantra, incidents commonly evolve from the blind spots that directors cannot see, and the knowledge gap is a critical component here. “If NEDs are in a position to question and challenge management,” Conor says, “and there are deficiencies in the response or execution, the Board can at least make an informed risk-based decision on dealing with those issues.”

      Read the full article featuring Conor here

       

      Contact us to learn more about our Cyber & Data Protection solution today.

      Contact Us

      Previous post Next post
      Share

      More like this

      Cybersecurity Awareness Month – a focus for asset managers

      Cybersecurity Awareness Month occurs each October and is a collaboration between government and private industry, designed to promote the importance…
      Read more

      eComms compliance – the SEC continues its scrutiny and issues substantial fines

      In September 2021, the SEC began its focus on how banks were monitoring, archiving and safeguarding business-related eComms being undertaken…
      Read more

      Building your cyber security foundation

      At Waystone Cyber Security Solutions we believe that as you grow your firm it should be built on a strong…
      Read more

      SEC Fines Firm $35 Million for Failure to Protect Client Data

      On September 20, 2022, the U.S. Securities and Exchange Commission (“SEC”) fined Morgan Stanley Smith Barney for their purported failure…
      Read more

      Securing sensitive employee data – recommended HR policies and procedures

      The onboarding and offboarding of employees is not a subject that we often think about in terms of information security.…
      Read more

      Cyber Security Solutions for the US Investment Advisers

      SEC Focus on Cyber Security and Operational Resilience. The US Securities and Exchange Commission (“SEC”) has increased its focus on…
      Read more