On June 10, Commissioner Luis Aguilar from the Securities and Exchange Commission said in a speech at the New York Stock Exchange that corporate boards must ensure that cybersecurity preparedness is a critical part of their risk oversight responsibilities. At a minimum, said Aguilar, boards should work with management to assess corporate policies to see how they match up to the National Institute of Standards and Technology's framework for cybersecurity infrastructure. Boards also should have a "clear understanding" of company personnel primarily responsible for cybersecurity risk oversight and for ensuring the adequacy of risk management practices.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
