The Troubles Caused by Ambiguous Cyber Disclosure Rules and CISO Criminalization
Disclosing Cybersecurity Incidents: Navigating a Vague Legal Landscape With the recent sentencing of former Uber CISO Joseph Sullivan for his role in covering up a 2016 data breach at the company, the stakes for chief information security officers (CISOs) and their teams have significantly increased. The lack of clear rules on cybersecurity incident disclosure has…