Artwork

Conteúdo fornecido por Olivia Duffey and BDO USA. Todo o conteúdo do podcast, incluindo episódios, gráficos e descrições de podcast, é carregado e fornecido diretamente por Olivia Duffey and BDO USA ou por seu parceiro de plataforma de podcast. Se você acredita que alguém está usando seu trabalho protegido por direitos autorais sem sua permissão, siga o processo descrito aqui https://pt.player.fm/legal.
Player FM - Aplicativo de podcast
Fique off-line com o app Player FM !

What May the SEC’s Proposed Cybersecurity Disclosure Rules Mean for Those in Governance Oversight Positions?

26:27
 
Compartilhar
 

Manage episode 332355708 series 2910096
Conteúdo fornecido por Olivia Duffey and BDO USA. Todo o conteúdo do podcast, incluindo episódios, gráficos e descrições de podcast, é carregado e fornecido diretamente por Olivia Duffey and BDO USA ou por seu parceiro de plataforma de podcast. Se você acredita que alguém está usando seu trabalho protegido por direitos autorais sem sua permissão, siga o processo descrito aqui https://pt.player.fm/legal.

Join BDO's Center for Corporate Governance Amy Rojik as she and her colleague Mike Stiglianese, who serves as the Managing Director in BDO Consulting’s Technology Advisory Services Practice, discuss the SEC’s recently proposed rules on cybersecurity risk management, strategy, governance and incident disclosure and the impacts and considerations these rules may have on those charged with governance.

Key Takeaways:

  • The SEC proposed cybersecurity disclosure rules are intended to formalize currently expected disclosures around aspects of cybersecurity that are useful to investors
  • The board will be required to provide disclosure about the cyber expertise that exists within the organization’s governance structure
  • Cybersecurity should be thought of and treated as necessary risk management processes and procedures
  • Cyber incident response plans need to be planned in advanced, involve key stakeholders, be well thought out and practiced and be adjusted continually to reflect the changing risk landscape
  • Documentation by the organization of the cyber risk management program is critical – including the identification, protection and disposal of data – along with testing of the program
  • Process and metrics shared with the board needs to be at the right level – By analogy: The audit committee wants to see the financial statements not the general ledger…

Resources:

  continue reading

83 episódios

Artwork
iconCompartilhar
 
Manage episode 332355708 series 2910096
Conteúdo fornecido por Olivia Duffey and BDO USA. Todo o conteúdo do podcast, incluindo episódios, gráficos e descrições de podcast, é carregado e fornecido diretamente por Olivia Duffey and BDO USA ou por seu parceiro de plataforma de podcast. Se você acredita que alguém está usando seu trabalho protegido por direitos autorais sem sua permissão, siga o processo descrito aqui https://pt.player.fm/legal.

Join BDO's Center for Corporate Governance Amy Rojik as she and her colleague Mike Stiglianese, who serves as the Managing Director in BDO Consulting’s Technology Advisory Services Practice, discuss the SEC’s recently proposed rules on cybersecurity risk management, strategy, governance and incident disclosure and the impacts and considerations these rules may have on those charged with governance.

Key Takeaways:

  • The SEC proposed cybersecurity disclosure rules are intended to formalize currently expected disclosures around aspects of cybersecurity that are useful to investors
  • The board will be required to provide disclosure about the cyber expertise that exists within the organization’s governance structure
  • Cybersecurity should be thought of and treated as necessary risk management processes and procedures
  • Cyber incident response plans need to be planned in advanced, involve key stakeholders, be well thought out and practiced and be adjusted continually to reflect the changing risk landscape
  • Documentation by the organization of the cyber risk management program is critical – including the identification, protection and disposal of data – along with testing of the program
  • Process and metrics shared with the board needs to be at the right level – By analogy: The audit committee wants to see the financial statements not the general ledger…

Resources:

  continue reading

83 episódios

ทุกตอน

×
 
Loading …

Bem vindo ao Player FM!

O Player FM procura na web por podcasts de alta qualidade para você curtir agora mesmo. É o melhor app de podcast e funciona no Android, iPhone e web. Inscreva-se para sincronizar as assinaturas entre os dispositivos.

 

Guia rápido de referências