Volume of Breaches Risks Breeding Inaction

Reports appear everyday about the cybersecurity threat facing British businesses. In the last six months alone, the major UK press have written almost 1,000 articles on cybersecurity threats. And it’s no surprise, given two thirds of large UK businesses were hit by a cyber breach or attack in the past year. But with this constant...

Defining Risk Appetite: Cyber Risk and Our Hunger for Leadership

“You don’t have to be one of the recent, high profile corporate victims of a cyberattack to realise that cyber is a clear and present danger.” So began Will Brandon, the Bank of England’s Chief Information Security Officer, in his speech to the recent City Week conference. Brandon, the man charged with advising Britain’s financial...

Cyber Literacy & The Board

Tanium teamed up with NASDAQ to shed light on the gap between corporate leaders’ presumed and actual understanding of their own cybersecurity vulnerability. In “The Accountability Gap: Cybersecurity & Building a Culture of Responsibility”, researchers from Goldsmiths, University of London, identified seven inherent challenges that businesses must overcome to manage cybersecurity vulnerability: cyber literacy, risk...

Bridging the Accountability Gap: Why We Need to Adopt a Culture of Responsibility

Orion Hindawi, Co-founder & CEO, Tanium Lou Modano, Senior Vice President, CISO and Global Head of Infrastructure Services, Nasdaq Businesses face a litany of existential threats: hostile takeovers, talent departures, unpredictable customer behavior, and market fluctuations – all deeply familiar risks that leaders have carefully planned for and assessed over decades. Yet these same leaders are...

The Case for Board Cyber Risk Oversight

As the Audit Committee chair for a public company, I am continually evaluating the enterprise risk management (ERM) model to monitor multiple components of risk to the organization. These can be operational risks like talent departures or the acquisition of a new business unit; or financial reporting risks such as the deployment of a new...