The Cybersecurity Lawsuit That Boards Are Talking About
Summary
In October, the Securities and Exchange Commission sued a software company hacked by Russian agents in 2020, accusing it of defrauding investors by not disclosing allegedly known cybersecurity risks and vulnerabilities. A year earlier, a former chief security officer at Uber, Joe Sullivan, was found guilty of failing to disclose a data breach to federal regulators. Jake Williams, a security expert who consults with companies when they’ve experienced a data breach, said he regularly saw CISOs being asked to “paint a rosy or maybe rosier-than-aligned-with-reality picture.” But he added: “That practice, I think, died the day the SolarWinds lawsuit was filed by the agency. No CISO can now risk basically painting an unrealistically positive picture of cybersecurity.” Harley Geiger is a lawyer who specializes in cybersecurity at the law firm Venable and is part of the team representing a coalition of tech companies including Cisco, Broadcom, Microsoft and Google. pioneer on her life and science When Fei-Fei Li, co-director of the Stanford Institute for Human-Centered Artificial Intelligence, showed the first draft of her book project to one of her colleagues, he told her to throw it away.