Yakir Golan’s Post

The attached report, "Cybersecurity Audit and the Board: How Board Oversight Impacts Cybersecurity Performance," offers comprehensive analysis and data-backed evidence that underscores a critical message for companies and their boards: Advanced cybersecurity ratings are not just a badge of honor; they are a significant value multiplier for shareholders. Companies at the forefront of cybersecurity, boasting advanced security ratings, are creating nearly four times the shareholder value compared to those with basic security ratings. In an era where cyber threats loom larger and regulatory pressures mount, this finding illuminates the path forward for businesses seeking sustainable growth and resilience. This revelation should serve as a call to boards and executives alike. In the digital age, robust cybersecurity is not merely a defensive strategy but a fundamental driver of financial performance and shareholder confidence. The report also sheds light on the mechanisms that propel companies to this level of cybersecurity excellence, including the strategic roles of specialized risk committees and the integration of cyber experts within governance structures. The report is definitely worth a read. What are your thoughts? #Cybersecurity #CorporateGovernance #ShareholderValue #BoardOversight #DiligentInstitute #Bitsight #CyberRiskManagement

📩 [Buyer’s Guide] We’re proud to release the most practical Buyer’s Guide about Cyber Risk Quantification (CRQ): 3 pillars, 10 use cases for CISOs that are business-enablers. CRQ isn’t just a tool—it’s an ally in smarter, faster decision-making. Our new guide shows how CRQ turns complex risks into concrete, actionable insights, helping justify investments, optimize resources, and communicate strategy across the organization in order to: ➡️ Strengthen governance and stakeholder buy-in ➡️ Align your cybersecurity efforts with business objectives ➡️ Make confident, data-driven decisions Download the guide and see CRQ in action! You’re just a click away to make your cybersecurity strategy practical, and impactful 👉 https://lnkd.in/eiz24AT3 #CyberRiskQuantification #CISO #CyberSecurityLeadership #DecisionMaking #StrategicCybersecurity #Citalid Maxime Cartan Julien C. Olivier Hamon Clément Tallec Marie Giesbert

October is Cybersecurity Awareness Month and we're highlighting why security isn't just a feature in wealthtech, it's foundational to everything we do. In wealth management, protecting client data requires the same careful approach as managing a portfolio. It's about understanding probability, mitigating risks, and building robust systems that stand up to real-world challenges. Want to learn more about how we approach cybersecurity and what you need to know in planning your data security strategy? Check out some of our recent thought leadership pieces where our Information Security Officer, John Messinger, shared crucial insights on what wealth enterprises need to know about cybersecurity: A Pile of SOC 2: Understanding how wealth management firms can evaluate cybersecurity risk using a statistical approach, similar to portfolio management strategies. Just as we help clients manage financial risk, we must apply the same rigorous analysis to cyber threats. Read John M.’s key takeaways here: https://lnkd.in/gcu_de9k A Bolt Out of the Blue: Analyzing the CrowdStrike incident and its implications for wealth management enterprises, emphasizing the importance of robust contingency planning and automated disaster recovery systems. Read John’s full analysis here: https://lnkd.in/gwvDDD-K Ready to learn more about our security-first approach? Let's connect. #BeCyberSmart #Cybersecurity #InformationSecurity #DataSecurity #CyberSecurityMonth

🔒 Cybersecurity and digital privacy in the boardroom are hot topics for 2023! Just came across a fascinating article on a new tool to help boards measure cyber resilience. Here's a sneak peek into the discussion: 🔍 Proper oversight: Gathering the right info is key 🔍 Shifting focus: From cyber protection to resilience 🔍 Boardroom challenges: Discussing cybersecurity meaningfully 🔍 The necessity for a new approach: Board's need for different information Learn more about this crucial aspect of board governance and cyber risk management! #CyberResilience #BoardroomChallenges #CyberSecurity https://lnkd.in/ggXSr6tZ

With greater cyber maturity comes greater resilience. 76% of organizations with high cyber maturity expect their #cybersecurity initiatives will ensure business resilience. Explore more insights from Deloitte’s Global #FutureOfCyberSurvey. After polling nearly 1,200 cyber leaders and conducting qualitative interviews where respondents shared their views on the evolving cybersecurity landscape and how their organizations are responding, here are a few key insights from the survey: · 86% of respondents are implementing actions to increase cybersecurity to a moderate or large extent. · Roughly 1/3 of respondents say CISO involvement has significantly increased in the past year when it comes to strategic conversations about technology capabilities. · On average 39% of respondents are using AI capabilities in their cybersecurity programs to a large extent. · 57% of respondents anticipate increasing their cybersecurity budget over the next 12 to 24 months. https://deloi.tt/3Y88XdG Feel free to approach me if you would like to discuss the outcomes in more detail! Emily Mossburg Mark D. Ward Matthew Holt Kjersti A. Stathopoulou Diederik Van der Sijpe Klaus J. Tariq M. Ajmal Vaibhav Malik Karthi Pillay Peter Birgersson Esben Kaufmann

Cyber Risk Quantification: Are We Getting It Wrong? As CISOs and security leaders, we're constantly bombarded with the need for cyber risk quantification (CRQ). But is our current approach actually making us safer? A recent conversation with dozens of CISOs revealed a disturbing truth: many doubt the trustworthiness of their CRQ methods. One exec at a major pharmaceutical company shared their frustration with 15 different tools generating proprietary risk scores, with some suggesting simply averaging these scores! This lack of standardization and transparency is creating confusion and distrust in CRQ. We need to ask ourselves: - Why are CISOs skeptical of CRQ? - What are the dangers of untrustworthy CRQ? - How can we build CRQ solutions that are truly reliable and valuable? Recent Balbix blog will help you address these pressing questions- https://lnkd.in/gGYK6nSi Let's start a conversation about how to make CRQ work for us, not against us. #cybersecurity #riskmanagement #cisos #crq

According to PwC's report, the number of cyberattacks with damages exceeding $1 million has significantly increased, with 36% of organizations surveyed experiencing such incidents in 2024, up from 27% in the previous year. This sharp rise is attributed to growing complexities in cyberattacks, and interconnectedness of cyber risks. The report underscores the need for companies to reevaluate their cybersecurity strategies to better manage and mitigate these high-cost threats. CISOs must rethink their approach to handle increasingly complex and interconnected threats. The report highlights five key strategies: ▶ adopting sophisticated cyber-risk models, ▶ leveraging AI to free up teams, ▶ integrating cybersecurity into board discussions, ▶ treating cybersecurity as a business enabler and ▶ clearly communicating security strategies to customers, investors and business partners. These actions are vital for staying ahead of cyber breaches and fostering organizational resilience.  #digitalresilience #cybersecurity

Netskope, renowned for cutting-edge cybersecurity solutions, has unveiled compelling research highlighting the evolving risk appetites of CISOs amidst shifting cyber threats. 📌 Growing Risk Appetite: 57% of CISOs report an increased appetite for risk, with 74% attributing this to firsthand cybersecurity incident experiences. 📌 C-Suite Tensions: 32% of CISOs view their CEOs as more risk-averse, causing tension within the C-suite. 92% of CISOs report differing attitudes leading to friction, with 66% feeling like they’re "walking a tightrope" between business demands and security needs. 📌 Evolving CISO Role: 65% of CISOs see themselves as business enablers, driving innovation while maintaining security. Only 36% now view their role primarily as protectors. James Robinson, Netskope’s CISO, emphasizes aligning security with business strategies to drive innovation. Steve Riley, Netskope’s Field CTO, notes CISOs’ progressive thinking in balancing security with business goals. For more insights, read the full report on our website: https://lnkd.in/dy2ehpp5 #Cybersecurity #Innovation #RiskManagement

💥 Companies With Advanced Cybersecurity Performance Deliver Nearly Four Times’ Higher Shareholder Return Than Their Peers, According to Diligent and Bitsight. 📢 Companies with advanced cybersecurity performance create 372% higher shareholder return compared to their peers with basic cybersecurity performance, according to a new report from Diligent and Bitsight. 📢 The report also reveals that highly regulated industries, such as healthcare and financial services, have the highest cybersecurity ratings, and companies with either a specialized risk committee or audit committee achieve better cybersecurity performance compared to those with neither, with ratings of 710 and 650 respectively. 💬 “These findings show that cybersecurity is not just an IT problem — it is an enterprise risk that has a material impact on a company’s near-term performance and long-term health, and one that management and the board need to be up to speed on,” said Dottie Schindlinger, Executive Director of the Diligent Institute. “With increased pressure from regulators for organizations to demonstrate how they oversee cybersecurity, now is the time for boards and leaders to build their competency around cyber risk.” For more findings: https://t.ly/pgE1- #cybersecurity #cyberrisk #cyberresilience

You’ve got the expertise, the team, and the security budget, but do you have the insights? Are you making decisions with confidence, or does it feel like you are crossing your fingers after each cyber investment? Our CRQ Buyer’s Guide is here to help you stop the guesswork. 3 pillars, 10 use cases, clean and simple. It’s time to stop talking FUD and start talking ROI.