Calling out Cyber Failings

The video discusses the intricacies of whistleblower claims, focusing on the legal distinctions and the evolving role of CISOs in managing cybersecurity risks. It examines high-profile cases like Twitter and Uber, highlighting the challenges in defining reasonable security and the importance of risk documentation. The discussion also covers company processes for handling whistleblower complaints, the incentives for whistleblowers, and the risks faced by CISOs. The session concludes with a Q&A addressing audience questions on liability and processes.

What constitutes a whistleblower accusation from a legal perspective?

How can a complaint turn into a whistleblower complaint?

What are some high-profile cases related to whistleblowing mentioned in the text?

What challenges do organizations face in managing cybersecurity risks?

What role does documentation play in protecting organizations from whistleblower claims?

How do companies typically handle complaints about cybersecurity?

What are the implications of the Uber case for CISOs and whistleblowing?

What factors contribute to the decision-making process regarding cybersecurity investments?

What incentives exist for individuals to become whistleblowers in cybersecurity?

Who should take charge of efforts to address cybersecurity whistleblower risks within a company?