logo
logo
Sign in

Three Compliance Mistakes CISOs should Avoid

avatar
bharat malviya
Three Compliance Mistakes CISOs should Avoid

With regulations related to IT systems and data on the constant rise, CISOs should ensure that they take the required steps that will allow them to avoid hefty fines related to non-compliance.


Compliance is highly regulated in industries such as healthcare, financial services and government, being an integral part of security for every organization. While this often falls within the purview of compliance, risk management, legal and other departments, the growing threat to enterprise infrastructure requires immediate attention from IT leaders.


CISOs and other board members should make themselves aware of the regulations that involve privacy, security, data and other technical elements.


They can play a vital role in ensuring their organization does not end up paying hefty fines for non-compliance.


Today the regulatory environment has become complex, especially with the emergence of many new rules that cover data privacy, including EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). In fact, as per Gartner’s “The State of Privacy and Personal Data Protection, 2020-2022”, 65% of the world’s population’s personal information will be covered under modern privacy laws by the end of 2023.


For today’s businesses, regulatory compliance related to IT systems, networks, devices as well as data has become a significant area of concern. The key to success in compliance efforts is to not cause difficulties. Here are a few mistakes that they should learn to avoid.


aking a defensive approach toward auditors


It becomes difficult not to adopt a defensive position when auditors and examiners question the latest IT projects and their impact on compliance.


When we speak of the well-thought-out IT strategy, it becomes more likely that there will be friction. Hence, to effectively deal with it, IT leaders should have in-person discussions with the auditors to understand their perspective and consider how it will help to make the environment better.



Full Article: Three Compliance Mistakes CISOs should Avoid

 

Cyber Security Industry News

collect
0
avatar
bharat malviya
guide
Zupyak is the world’s largest content marketing community, with over 400 000 members and 3 million articles. Explore and get your content discovered.
Read more