Security Insurance

From MgmtWiki
Jump to: navigation, search

Full Title or Meme

Somehow insurance companies have convinced business to rely on insurance to cover losses from their own inadequate efforts to secure their assets.

Spoiler alert => insurance doesn't work like that!

Context

Enterprise CIO and CISO are required to report to the Board of Directors (or equal) whether the company is properly handling risks. Many are covering their incompetence by buying insurance and then lying to the BoD about the coverage that the Enterprises have.

Cyber insurance gaps stick firms with millions in uncovered losses

Reverences