Hello,
Are you a “technical” CISO finding yourself in a “Strategic/Business/Risk” Cyber Security world? If not, you will be soon.

Both the Securities and Exchange Commission (SEC) and the National Institute of Standards and Technology (NIST) have issued recent guidance significantly impacting CISOs.

•	Are you prepared to work with/coach your Board of Directors (BOD) in their terms (e.g. “Strategic /Business /Risk”)?

•	Your Annual Report now details not only your BOD Cyber Security oversight, but also explicit details about your Cyber Security risks. Does your InfoSec program deliberately align with this due diligence? Are you prepared to demonstrate this to your BOD, auditors, or maybe even a jury?

•	The NIST 800-61r3 now requires CIRPs to include “broader cybersecurity RISK MANAGEMENT, emphasizing a STRATEGIC, ongoing, and BUSINESS-ALIGNED approach rather than a STANDALONE TECHNICAL LIFECYCLE”. Your CIRP is one of the most visible InfoSec documents you have. Is it aligned with the cyber security risks you have disclosed to shareholders, or merely “standalone technical lifecycle” focused?

WE CAN HELP YOU:

•	We can help you get your CIRP in line with these new expectations and specifically aligned with the cyber risks you’ve disclosed in your Annual Report. We have a section of my CIRP that is deliberately designed for your BOD/management team. We can also perform management level Tabletop Exercises (TTX) to support these new mandates.

•	We have partnered with Colin Anderson, a FIVE TIME recipient of the (global) CISO 100 award to develop a 3 day/$10K workshop that will not only provide you with knowledge, but also customized deliverables that you can immediately use to meet these new challenges. Everything from policy down to SIEM correlation logic based in your unique cyber risks.

HOW TO CONTACT ME: DM here on LI or Neal@McCarthyCyberReadiness.com.

More info on my bio is available on my website.

McCarthy Cyber Readiness

Org chart

Teams

Offices

McCarthy Cyber Readiness

Org chart

Teams

Offices

Related companies