As consumers in North America nd the U.K. worriedly typed their names and Social Secu- rity digits on Equifax’s “Check- ing Potential Impact” site, ordered credit freezes and considered more stringent cyber-defense steps, they
reached the same grim realization that leading cybersecurity consultants have been drumming into corporate boards and executive teams:
So this is how it’s going to be.
Until recently, far more companies suffered far
greater and more enduring damage from cyberattacks than many consumers—including some of
those who sit on corporate boards—understood.
If there can be a silver lining to the recent spate of
The Equifax hack is just the latest data breach forcing
crippling cyberattacks on companies and consum-
ers this year it is that they have raised awareness of
this strategic risk while sparking crash courses in
cybersecurity training and education. As consum-
ers learn about unfreeze PINs and IRS Form 14039,
“The board is becoming more informed and
more educated,” says Vice President of Strategy,
IBM Security Services, John Wheeler. “In some
cases, boards have put in place a director with cy-
bersecurity experience who very much knows what
questions to ask of management.”
The board’s growing engagement with cyber-
risk—combined with the rapidly changing nature of
cybersecurity threats, the ongoing digital transfor-
mation of all companies, and the procession of new
state, federal and global cyber-related directives
and rules coming down the pike —all but guarantee
that cybersecurity consulting will remain in high de-
mand for the foreseeable future. While progress has
been made in some areas of organizational cyber-
security capabilities, additional progress remains a
top board-level priority for most companies.
many companies—and their leaders in the C-suite—
to rethink their cybersecurity strategies.
Can Consultants keep up?
BY ERIC KRELL