by Bob Chaput | Mar 7, 2025 | Board and CISO Interaction – Best Practices, Costs of Cyber Attacks and Data Breaches, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
Introduction As my readers know, I have an affinity for risk analysis and risk management, which I often pose in the form of this question: How will you make informed, intelligent decisions about what safeguards you should invest in and implement until you understand...
by Bob Chaput | Jan 27, 2025 | Board and CISO Interaction – Best Practices, Costs of Cyber Attacks and Data Breaches, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
“As the world is increasingly interconnected, everyone shares the responsibility of securing cyberspace.” ― Newton Lee “And it starts with C-suite and board accountability.” ― Bob Chaput Introduction In today’s rapidly evolving digital landscape, enterprise cyber risk...
by Bob Chaput | Jan 13, 2025 | Board and CISO Interaction – Best Practices, Costs of Cyber Attacks and Data Breaches, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
ignment of business strategy and risk appetite should minimize the firm’s exposure to large and unexpected losses. In addition, the firm’s risk management capabilities need to be commensurate with the risks it expects to take. —Jerome Powell Introduction...
by Bob Chaput | Dec 30, 2024 | Board and CISO Interaction – Best Practices, Governance, Strategy, and Alignment
The Role of Risk Literacy, Accountability, and Business Value in Strengthening Healthcare Cybersecurity “The most important defense is to instill a patient safety-focused culture of cybersecurity.” – John Riggi, Senior Advisor for Cybersecurity and Risk for the...
by Bob Chaput | Dec 17, 2024 | Board and CISO Interaction – Best Practices, Governance, Strategy, and Alignment
Never make predictions, especially about the future. —Casey Stengel Introduction I’ll leave all the 2025 prognostications to those more qualified and those who think they are. This post is simply a reflection on Enterprise Cyber Risk Management (ECRM) and the Chief...
by Bob Chaput | Nov 19, 2024 | Board and CISO Interaction – Best Practices, Governance, Strategy, and Alignment
It’s just not about patient safety. It’s also about public safety and even national security. —Errol Weiss, chief security officer, Health Information Sharing and Analysis Center (H-ISAC) Introduction In recent years, the healthcare sector has become increasingly in...