CISOs Urged to Strengthen Incident Communication and Preparation After Uber Verdict
Summary
Following the Uber CISO conviction, security leaders share recommendations on transparency, executive coordination, incident-response planning, legal support, and organizational ethics.
Key points
- Industry experts recommend keeping regulators informed as incident details emerge and escalating significant issues within the organization.
- CISOs should maintain regular communication with executives and general counsel, with clear roles for incident decisions.
- Organizations should document decision-making processes, prepare for varied incident scenarios, and regularly test response plans.
- Experts suggest CISOs consider independent legal counsel; the article notes D&O insurance does not cover criminal liability.
- The article emphasizes ethical organizational culture and diverse perspectives in high-stakes security decisions.
Article Details
- Topic
- Guidance for CISOs on transparency, executive communication, incident-response preparation, legal representation, and organizational integrity following the Uber CISO verdict.
People
Olivia RoseAmplitude and Mailchimp’s former CISO; discussed executive decision-making and communication around security incidents.Rob ChesnutAirbnb’s former general counsel and Chief Ethics Officer; described coordinating with CISOs and other stakeholders.Stephen WardThe Home Depot's former CISO; offered recommendations on transparency, scenario planning, and executive involvement.Tomás MaldonadoNFL’s CISO; discussed CISOs’ responsibility to communicate security issues transparently.