Feature By Laura Wilson, JD, CISA Candidate, ♦ ISR Corporate Liability Editor
For certain industries such as the financial industry, we don’t need to wait for new regulations to enforce that responsibility, and to hold companies and individuals liable when they willfully or negligently bypass the protections that are promised to consumers, shareholders, and regulators.
There are tools on the books now, including Sarbanes-Oxley, that we can use to hold financial companies responsible for how they handle that data. The financial industry has long understood and acknowledged the importance of information security. If you know the questions to ask, you can find that the companies themselves are well aware of their obligations, and exactly where their security train fell off the infosec rails.
Continued ♦ Cyber Security Tops 2009 Agenda