Cyber Crash Course for Directors and Officers

Bennett Jones LLP
Contact

Bennett Jones LLP

We had a packed house for our Cyber Time: Crash Course for Directors and Officers event this week at the Bennett Jones Calgary office. The half-day session covered current cyber threats facing businesses today, litigation exposure from a cyber incident involving personal information or confidential business information, regulatory compliance obligations regarding the protection of personal information, and insurance solutions to mitigate certain risks associated with cyberattacks. Our panel of experts included Ruth Promislow and Michael Whitt of Bennett Jones, Jay Heidecker of Seekinto and Dan Lewis of Arthur J. Gallagher Canada Limited.

The consistent theme in all of the presentations involved the need to be proactive, rather than simply reactive. Being proactive makes good business sense in that it can reduce costs incurred in responding to an attack. It also can reduce litigation risk exposure from an attack or the response to the breach. Additionally, regulatory obligations require a proactive approach. Cyber insurance can be a key component to reducing risk exposure. However, it does not cover all forms of risk and it does not replace the need (and obligation) to address risk and vulnerabilities before an attack.

The key questions identified for directors and officers to ask included the following:

  • What information do we have?
  • What is the sensitivity of this information?
  • How is the information stored?
  • What information do we retain and what do we dispose of?
  • What safeguards are in place to protect the information?
  • What is the likelihood of damage occurring and the potential severity?
  • What jurisdictions are we potentially subject to?
  • Are we in compliance with regulatory obligations?
  • Have we protected ourselves against third-party risks?
  • Do we have a breach response plan?
  • Have we tested our breach response plan?
  • Are we confident that in the face of an incident, we can avoid creating a paper trail that could be used against us?
  • Who do we have on speed dial in the event of a breach?

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Bennett Jones LLP | Attorney Advertising

Written by:

Bennett Jones LLP
Contact
more
less

Bennett Jones LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.