As consumers, we expect companies we purchase products and services from to adequately protect our data. Since 2002, the Federal Trade Commission (FTC) has brought 60 cases against companies that have engaged in unfair or deceptive practices that failed to adequately protect consumers’ personal data (FTC: Privacy and Data Security Update: 2017).
“Reasonable cybersecurity” is a way to look at cybersecurity through a legal lens, and allows organizations to better evaluate whether the people, process, technology, and management behind a given cybersecurity initiative have produced “reasonable” outcomes where compliance issues are concerned.
In this episode of the InSecurity Podcast, host Shaun Walsh is joined by special guest Kip Boyle, Founder and CEO at Cyber Risk Opportunities, to discuss challenges in determining “reasonable cybersecurity” thresholds and maintaining them.
