How to Get a True View of Cyber Risk

For a custom article written by Custom Content from WSJ on behalf of FTI Consulting, Miriam Wugmeister spoke about how the strength of the relationship between a company’s general counsel (GC) and chief information security officer (CISO) can enable quick and efficient handling of cyber incidents and ensure data is kept safe.

“We all know that software needs to be patched,” Miriam said. “A real conversation between a GC and a CISO goes beyond that to address things like how long it takes to patch a critical vulnerability. Because one of the ways in which organizations get in trouble is they have a vulnerability, a patch comes out and they don’t put the patch in quickly. In the meantime, the bad guys get in.”

She added: “A lot of times the CISO goes to the board with dashboards that lack context and meaning to the board. If the GC and the CISO are having regular, honest, open conversations about the risk they face and how to mitigate it, the GC can help the CISO provide realistic context. For example, the GC could be the one to articulate to the board that the company faces more risk because they just got rid of 5% of the IT department.”

Read the full article (subscription required).