The Buck Stops….Where? Data Breach Accountability and the C-Suite
summary
Panel traces fallout from the Joe Sullivan conviction as the first federal criminal case against a CISO and shows concrete shifts: 25% have D&O now, companies juggle 54 different breach laws, boards demand clearer reporting, and CISOs negotiate D&O, indemnity and severance at hiring. Practical fixes include signed exception registers with audit trails, one‑on‑one remediation plans, regular tabletops and threat intel sharing, using an LP to shield personal assets, and building tight GC and government contacts to shorten legal response time.
AI-written summary · about
chapters (12)
- 0:00Introduction and panel overview
- 1:46CISO liability shifts and concerns
- 6:25Legal perspective on breach accountability
- 10:22Data breach liability landscape
- 14:16Unanticipated changes in defenses
- 17:48Best practices for internal processes
- 22:27Public-private sector collaboration
- 24:36Policy recommendations for breach liability
- 31:19Steps to protect CISOs from liability
- 35:57Lightning round and audience questions
- 48:03DOJ collaboration and incident response
- 50:34Q&A and closing remarks
related talks
50mCISOs Under Indictment: Case Studies, Lessons Learned, and What’s Next
01h 00mCXO Panel: Clash Of The Titans; Who Will Survive?
46mCXO Panel: Breached? – Here Is How I Responded!
01h 00mFrom the Fry Pan to the Fire—Personal Liability for CISOs and InfoSec Pros
54mThe Human Impact of Cyberattacks: Reframing the Defender Role
22mThe CISO’s Guide to Securing a Board Seat
47mThe Evolving Role of the CISO and the Security Organization
42mCISO Panel