Close

Are you in compliance?

Don't miss out! Sign up today for our weekly newsletters and stay abreast of important GRC-related information and news.

×

Status message

Start your free, no obligation 10-day trial to continue exploring with full access.

Auditors offer ideas to help address cyber-readiness

Tammy Whitehouse | October 11, 2017

Despite the proliferation and escalation of cyber-breaches, companies and government agencies are still trying to wrap their heads around the notion that break-ins are inevitable.

“Over 30 years, we moved almost everything we value from the analog space to the digital space, connected through a protocol that is not secure,” says John Carlin, partner and chair of the global risk and crisis management practice at law firm Morrison & Foerster. “There is no internet-connected system that is safe from being breached by a dedicated adversary. The technology does not exist.”

That’s not much different from what other cyber-experts are telling companies—that companies should recognize it’s not a question whether they will be breached, but when, and how they’ll handle it when it happens.

Corporate boards are starting to get more engaged on the cyber-threat, says Gregory Garrett, leader of international cyber-security at audit firm BDO USA. The firm’s fourth annual... To get the full story, subscribe now.