Brews & Bytes with Kyle

In today's episode we taste a brew from New Belgium, specifically their Trippel. On the bytes front, we discuss the recent SEC rules changes relative to cybersecurity, including the 8-K and 10-K filings. The new 8-K rule requires that organizations disclose material cybersecurity incidents within four days of making the determination that the incident was material. The 10-K rule now requires organizations to make annual disclosures regarding their cybersecurity risk management programs, including how those practices are integrated into their broader risk management effort. As discussed, I call out that I think organizations should: 1. Document their process for evaluating an incident's materiality, including updating IR plans to include a swimlane that includes that activity and providing details on how materiality will be determined 2. Review their cybersecurity risk management programs in an open and honest way to ensure that their disclosures accurately reflect what they do and are not overstating their capabilities (ala SolarWinds). I look forward to hearing your thoughts on these subjects and continuing the dialog!
Episode 2: New Belgium and SEC Changes
Today we're talking about Leffe Blonde and privacy foundations. Specifically, we're highlighting the changes in the discourse I've observed recently, as well as the top three things I think organizations should be doing to jumpstart their privacy programs: 1. Privacy Program Assessment 2. Privacy Program Governance 3. Data Discovery Please let me know your thoughts and feedback... but note the following: 1. It was admittedly a really bad pour... don't kill me 2. Disregard the mic cable that seemed to be grabbing on for deer life Enjoy!
Episode 01: Leffe Blonde & Privacy Foundations
Subscribe
Scroll to Top
WordPress Appliance - Powered by TurnKey Linux