Tag: cybersecurity governance
6 articles
NSPM-12 Drives Need for Governed Data Foundation
To safeguard national security, NSPM-12 demands a robust data governance framework that unites distributed data sources through live, governed access, enabling stronger accountability and coordinated processes across agencies. A governed data foundation is crucial for meeting NSPM-12's stringent requirements and driving effective cross-agency collaboration.
UK Shifts Cybersecurity Governance to Service-Led Model
The UK's 2022 "defend as one" cybersecurity approach hit a roadblock, faltering on the assumption that simply issuing standards and requiring assurance would drive compliance across its sprawling, 465-strong network of ministries, agencies, and public bodies. A new service-led model for cybersecurity governance is taking its place.
Most S&P 500 Firms Neglect AI Cyber Risk Disclosures
Despite 97% of S&P 500 companies mentioning AI in their annual reports, a staggering gap exists: only 16% actually document a specific process for managing AI-related cyber risks. This revelation raises crucial questions about corporate transparency and preparedness in the face of emerging threats.
Cybersecurity Firms Back AI Charter to Guide Secure Use
CREST has launched a groundbreaking AI Charter, outlining nine essential principles to ensure the secure and responsible use of AI in cybersecurity, with industry leaders rallying behind the initiative as a crucial step towards a safer digital landscape. The charter's nine points provide a comprehensive framework for accountability, transparency, and security in AI-driven cybersecurity activities.
Cybersecurity Reframing Fuels Governance Risks
The growing trend of treating social and regulatory issues as cybersecurity threats is blurring the lines between policy debates and governance, with far-reaching consequences. From misinformation to child safety laws, an increasing array of problems are being reframed as cybersecurity risks, changing the way we approach governance and policy.
ENISA Pursues Elevated Status in Global CVE Program
The European Union's cybersecurity agency, ENISA, is taking a major step forward in global cybersecurity by seeking top-tier status in the prestigious CVE Program, a move that could reshape the landscape of vulnerability management. If approved, ENISA would join an elite group of just three organizations with the highest level of authority in this critical program.