The Impact of the New SEC Regulations on Cybersecurity – BSW #331

Steve Katz, the world's first CISO, died Saturday night while under hospice care in Long Island, New York. Katz was a pioneer and trailblazer in cybersecurity leadership. He became the first CISO in history when named to the newly created role at Citicorp in 1995.

Steve was a 'Guiding Light' for Security Leaders. Here his interview on our CISO Stories podcast: https://www.scmagazine.com/podcast-episode/2368-your-job-is-to-make-cybersecurity-simple-steve-katz-csp-6

Recently, the Securities and Exchange Commission (“SEC”) filed a complaint in the Southern District of New York against the SolarWinds Corporation, a network and infrastructure management company, and also named the company’s Chief Information Security Officer as an individual in the action. The SEC’s complaint alleges that the defendants defrauded investors and customers through internal control failures, as well as a series of misstatements, omissions, and schemes that obscured SolarWinds’ deficient cybersecurity practices and the cybersecurity threats it was facing. While the SEC has recently issued cybersecurity rules that will come into effect in December, these allegations are all founded on existing regulations that do not invoke the requirements of the new rules. We summarize the case below and suggest a number of precautions companies can take in contemplation of this more aggressive SEC posture regarding cybersecurity compliance.

If you are a cybersecurity leader for your organization, it can sometimes seem like a daunting task to take on alone. Having the responsibility to understand an ever-evolving cybersecurity threat landscape from both inside your organization and the outside is very demanding and requires continuously monitored security. However, cybersecurity threats are not unique to just one organization, every organization that utilizes electronics faces these threats, which is why CISO communities have been formed. CISO communities are available around the world for cybersecurity leaders so that they can meet with other professionals who face similar challenges in their positions in order to collaborate and find solutions.

In the rapidly evolving landscape of modern business, virtual leadership has become a critical skill for guiding teams through digital channels. The shift to remote work, accelerated by global events, has necessitated a new approach to leadership. Here are real-world examples and practical tips for business leaders aiming to succeed in the realm of virtual leadership.

When you think of good leadership, what comes to mind?

Rasmus Hougaard and Jacqueline Carter argue that good leadership isn’t rooted in power or public speaking skills. They say that, in fact, mindfulness, selflessness, and compassion are the key components.

Leadership involves more than simply engaging in discourse; it necessitates relinquishing the metaphorical stage and wholeheartedly embracing the art of attentive listening.

Effective leadership transcends dictation and decision-making. Genuine leadership demands a profound understanding and connection with those who are being led.

By actively engaging in the act of listening, leaders gain awareness of the needs, concerns, and aspirations of their team members. This in turn allows them to foster stronger relationships and nurture mutual respect.

According to a survey of 5,000 workers, over half of people think a good workplace culture is more important than salary for job satisfaction.

Employees want to work at a company whose culture they like. And this is good for companies too. A strong culture enhances collaboration, skyrockets productivity, and becomes a magnetic force that attracts top talent.

Whether you’re a manager, in HR or an employee, this article will show you how you can contribute to creating a top-level workplace culture.