Insight No. 1: Lawyer up, CISOs!

A recent report found that 70% of CISOs have gotten cold feet about the job, given stories of people in their position who’ve been held personally liable for cybersecurity incidents. To protect themselves, CISOs should negotiate for contractual protections such as severance triggered by reporting structure changes, insurance protections, enterprise-paid independent attorney fees, and full indemnification for judgments or penalties related to their official duties.

*** This is a Security Bloggers Network syndicated blog from AppSec Observer authored by David Lindner, Director, Application Security. Read the original post at: https://www.contrastsecurity.com/security-influencers/cybersecurity-insights-with-contrast-ciso-david-lindner-01/10/25