“CISOs ought to prioritize shifting from a reactive to a proactive cybersecurity stance by gaining a transparent grasp on each aspect of cyber risk publicity administration: asset discovery and administration, early warning risk detection, vulnerability discovery, prioritization and remediation,” Simpson stated.
“This is not going to solely allow steady compliance with DORA’s forward-looking directives, however it should additionally strategically empower safety groups to guard all the assault floor and handle their group’s cyber danger publicity in real-time to strengthen cybersecurity total in opposition to present and rising threats.”
Compliance doesn’t equate to safety, in line with the outdated adage, however compliance with DORA and GDPR will, as Simpson factors out, “strategically empower safety groups,” and isn’t that could be a desired consequence for each CISO?