Cyber Risks · Krebs on Security

A Chief Security Concern for Executive Teams

Summary: A KrebsOnSecurity review of the global top 100 companies by market value found just five percent listed a chief information security officer or chief security officer on their executive leadership pages, while 73 percent listed a chief human resources officer. Among the top 50 NASDAQ firms, fewer than half listed a CTO and only three featured a person with a security title.

Why it matters: At Equifax, the CSO sat under the chief legal officer rather than the CIO, IT and security rarely communicated, and the breach exposed personal and financial data on 148 million people; the House Oversight report traced the failure to that reporting structure, not just the unpatched Struts vulnerability.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related