The data points covered in the attached white paper are organized into broad categories helpful for shaping analysis and scrutiny and include:
- Evaluating logging capabilities
- Vetting penetration tests and testing consultants
- Adopting data loss protection (DLP) systems
- Patching and updating software
- Installing endpoint detection and response (EDL) tools
- Assessing physical security of facilities
This four-part series of white papers covers the following cybersecurity topics:
Part 1, Cybersecurity Governance:
critical components related to the governance practices, policies and procedures of a strong cybersecurity program.
Part II, People:
cybersecurity recruitment, training and retention as well as hiring outside firms for digital forensics and data breach response.
Part III, Technology:
the technical systems that provide the foundation for cybersecurity infrastructure.
Part IV, Data Mapping and Encryption (Coming in May): the board’s oversight responsibilities with respect to two of the largest enterprise undertakings in the field of cybersecurity: encryption and data mapping.
By using these white papers as a guide, boards of directors can become not only more preemptive in evaluating cybersecurity risk exposure but they can also successfully elevate cybersecurity from an ancillary IT concern to a core enterprise-wide risk management item.
Read John Reed Stark's Latest White Paper on Cybersecurity Technology >>
John Reed Stark is President of John Reed Stark Consulting LLC, a data breach response and digital compliance firm. Formerly, Mr. Stark served for almost 20 years in the Enforcement Division of the U.S. Securities and Exchange Commission, the last 11 of which as Chief of its Office of Internet Enforcement. He also worked for 15 years as an Adjunct Professor of Law at the Georgetown University Law Center, where he taught several courses on the juxtaposition of law, technology and crime, and for five years as managing director of a global data breach response firm, including three years heading its Washington, D.C. office. Mr. Stark is the author of, "The Cybersecurity Due Diligence Handbook," available as an eBook on Amazon, iBooks and other booksellers.