Ignorance Not Bliss: Cyber Risk Management Found Lacking

Despite increasing cyber attacks, significant losses from operational downtime, and further governmental regulation, companies are still not taking measures for basic responsibilities for cyber governance, or even securing available insurance. A recent Carnegie Mellon CyLab 2012 Report provides the following recommendations:

Businesses should: 1) Establish policies to protect from attack, data breach, and data misuse, 2) Identify responsibilities and assign roles to management, 3) Verify qualified persons are retained to monitor privacy and security, 4) Establish periodic reviews of internal and external risks, and regulatory compliance, 5) Establish policies to respond to an attack or breach, 6) Provide adequate budgeting to allow sufficient response to risks, 7) Conduct annual audits of to determine the effectiveness of controls, and 8) Evaluate the adequacy of insurance coverage.

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Peter S. Bauman - Senior Commercial Litigation Attorney Callahan & Blaine, (714) 241-4444 (office) / (949) 842-1720 (mobile) | Attorney Advertising

Written by:


(714) 241-4444 (office) / (949) 842-1720 (mobile) on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.