Board

Subscribe to Board

Ransomware attacks continue to surge from the levels seen just a few years ago and the threat such attacks present against companies and organisations remains very real – not least because the sums involved also continue to surge. According to a recent report by software company Acronis1, global ransomware damages are predicted to…

With the cybersecurity landscape evolving ever more rapidly, and the threats to businesses’ critical information and assets—as well as to their bottom lines—are only increasing. Breaches continue to grow in scale and sophistication, regulators are crowding the field with an expanding and shifting array of requirements and de facto standards, and litigation remains perilous. Now,…

An organization’s board of directors assumes ultimate accountability for governing cybersecurity risk. Chief information security officers (CISOs) play an increasingly indispensable role in enabling board members and senior executives to engage in appropriate cyber risk management, communicate using cyber metrics with business objectives in mind, and facilitate proper oversight of the company’s cyber program. Among…

As cybersecurity and privacy risks mount, financial services companies face new concerns about compliance and enforcement as well as the risk of business interruption and costly litigation. In this Cybersecurity Awareness Month program, our lawyers will discuss the recent regulatory developments from the New York Department of Financial Services (NYDFS) that are presenting real-world challenges…

Our Cyber Perspectives series presents broad-ranging discussions with those contending with cybersecurity threats from the front lines.

Please join Mayer Brown’s Marcus Christian in conversation with Burt Fealing, Executive Vice President, General Counsel, Compliance and Corporate Secretary at Southwire Company. Topics will include:

  • Key lessons for corporate leaders about cybersecurity readiness
  • Evolution in the role

…

The European General Data Protection Regulation (“GDPR”) entered in force on May 25, 2018 (“GDPR Day”). The GDPR sets forth a new regime for the protection of personal data in the European Union (“EU”). We briefly discuss below five things that general counsel should know about the GDPR, including lessons learned since GDPR Day.

Continue

To facilitate cyber incident response in practice, many organizations are building “cybersecurity playbooks” that provide tailored, practical guidance that enhances organizational readiness. During a cyber incident, easy access to actionable material can be central to an effective response. The content, audience and goals for a playbook may vary. For example, they may contain highly technical…

The cybersecurity regulation (“CyberRegs”) adopted by the New York State Department of Financial Services (“NYDFS”) is almost two years old and will be fully in effect by March 2019. The CyberRegs has already had a broad impact on financial institutions that are authorized to engage in business in New York (“Covered Entities”). Furthermore, even for…

As businesses continue to leverage complex systems, managing the vulnerabilities inherent in such operations will become an increasingly important task. Vulnerabilities are the weaknesses in software code and network systems that render information and products susceptible to exploitation by malicious actors. As recent headlines attest, the consequences of such exploitation can be significant. Vulnerability management…