CISOs hit with third-party security incidents: a compliance issue

View profile for Frank Gilbert

Technology executive bridging AI innovation with human potential. MSc Cyberpsychology | Strategic transformation leader | AI, Ethics & Privacy expert

71% of CISOs hit with third-party security incident this year It IS the responsibility of a business to ensure that the partners and vendors they work with follow appropriate security and privacy compliance standards. Businesses must conduct thorough evaluations of their partners' cybersecurity posture, including verifying compliance with relevant regulations like GDPR, HIPAA, PCI DSS, and industry security certifications such as ISO 27001 or SOC 2. No excuses. No finger pointing. However being "in compliance" does not guarantee immunity from sophisticated cyber threats. If all you do is make sure you have checked the boxes necessary to protect you legally, but not protect your customers data ... #privacy #security https://lnkd.in/eWz64_DC

Gurpreet Singh

🚀 Driving Cloud Strategy & Digital Transformation | 🤝 Leading GRC, InfoSec & Compliance | 💡Thought Leader for Future Leaders | 🏆 Award-Winning CTO/CISO | 🌎 Helping Businesses Win in Tech

1w

Great post, Frank. This is a great way to put it. It's almost like building a dam—compliance is the concrete, but vigilance is the water sensors.

Like
Reply

To view or add a comment, sign in

Explore content categories