Infosecurity Magazine reports on a new Tripwire survey gleaned from last week’s RSA Conference that found 41 percent of the 250 attendees said the “CIO, CISO or CSO” would be held responsible for a breach of an organization’s critical infrastructure while 35 percent believe they “should” be held responsible. “Cybersecurity liability is difficult to assign because you have to determine who knew about the risks, and then you have to figure out what they did, or did not do about them,” said Tripwire Senior Security Analyst Ken Westin, adding, “If the CEO is made aware of security risks and does not provide the resources or plans to fix them, they own some of the responsibility.”
Full Story