В Британии обсуждают введение личной ответственности топ-менеджеров за киберинциденты

Some have questioned UK's proposed Cyber Security and Resilience Bill, specifically its lack of provisions for penalizing senior executives when organizational failures in compliance involve their consent or neglect. This debate centers on making cybersecurity a board-level responsibility, according to The Register. Baronesses Kidron and Ludford have backed amendments to introduce personal civil liability for senior executives, arguing that culture change in cybersecurity must start at the top. They pointed to similar accountability measures in the financial sector and the EU's NIS2 directive.  Lord Clement-Jones stated that executives earning high salaries should be prepared to carry personal responsibility for securing their organizations. However, the government, represented by cybersecurity minister Baroness Lloyd of Effra, defended the bill's existing framework, which includes substantial fines of up to £17 million or 4 percent of annual turnover and forthcoming secondary legislation mandating board-level governance.  Peers also raised concerns about the bill's reporting requirements, warning that the current wording could overwhelm regulators with an administrative burden. Baroness Harding, drawing on her experience as former TalkTalk CEO, proposed extended reporting timelines to allow for more comprehensive data collection and sharing, emphasizing its importance for law enforcement and regulatory action. The government maintained that the existing two-stage reporting process is sufficient for timely intervention and information gathering. Written by Kelley Damore Chief Content Officer CyberRisk Alliance Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.