Ten Legal Issues for CISOs
summary
Covers ten concrete legal risks CISOs face: whether paying ransomware is Treasury warns paying ransoms may be illegal and risky for sanctions/attribution; cyber insurance often excludes IP, “acts of war,” gaps in standards and insurance "act of war" exclusions (note Merck’s related $1.4B loss); supply‑chain and WFH liability, when to involve police, protection of trade secrets, breach litigation exposure, insider‑monitoring limits, and global privacy conflict — recommends documenting standards, timestamping breaches, and ask for personal indemnity/coverage as part of hiring.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:57Ransomware- to pay or not to pay?
- 1:07Ransomware payments
- 10:23Supply chain liability - what duty do we owe to others in the chain?
- 14:48Do I call law enforcement?
- 15:23Inviting Law Enforcement In
- 27:28Breach Litigation
- 33:19Insider threats and employee privacy
- 33:52Who is the threat?
- 41:57Apply What You Have Learned Today
related talks
01h 00mFrom the Fry Pan to the Fire—Personal Liability for CISOs and InfoSec Pros
44mCyber Insurance 101 for CISO’s
42mNew Legal & Regulatory Developments Impacting the IT Professional Community
36mCybersecurity, Privacy and Data Security from a Business Lawyer's Perspective
50mCISOs Under Indictment: Case Studies, Lessons Learned, and What’s Next
38mUnderstanding Response Risk Relative to Ransomware and DoT Guidelines
47mThe Evolving Role of the CISO and the Security Organization
50mAvoiding Legal Landmines: A Review of Recent Cyber Cases