From the Fry Pan to the Fire—Personal Liability for CISOs and InfoSec Pros
summary
Real-time review of recent probes (Uber, Yahoo!, Equifax) links specific criminal theories—false statements, securities and wire fraud, obstruction, misprision—to concrete lapses: delayed disclosure, missing escalation criteria, and absent records. Advice centers on measurable controls: a tested escalation matrix, preserved IR logs, forensic timelines, board briefings, and contract clauses (bylaws/D&O and get indemnification in writing). Expect six-figure legal bills, D&O aggregation limits, fee advancement with document everything to negate allegations of concealment.
AI-written summary · about
chapters (27)
- 0:00Intro
- 3:00Colonial Pipeline Incident
- 4:35Criminal Liability
- 7:27Yahoo Case Study
- 8:49Equifax
- 10:13Legal Implications
- 12:05Yahoo
- 22:31Lawsuits
- 24:29SEC Investigation
- 26:38Key Takeaways
- 30:24Escalation
- 32:27Documentation
- 35:01Legal Question
- 35:46Record Retention
- 37:06Relationship
- 37:42Market
- 38:35Executive Engagement
- 40:13Pre Incident vs Post Incident
- 40:59Find a Security Champion
- 41:28What about me
- 46:24How do you negotiate a job
- 46:50Ask for it
- 49:32Corporate DNA Policy
- 51:04DNO Policy
- 51:47Delaware General Corporate Law
- 52:37Advance and Undertaking to repay
- 54:51Document your employment agreement
related talks
01mCISO Legal Risks And Liabilities
52mThe Buck Stops….Where? Data Breach Accountability and the C-Suite
50mCISOs Under Indictment: Case Studies, Lessons Learned, and What’s Next
51mTen Legal Issues for CISOs
52mCISO Legal Risks and Liabilities
52mCISOs and Legal Uniting in a Post Uber and Twitter World
01h 00mCXO Panel: Clash Of The Titans; Who Will Survive?
54mThe Human Impact of Cyberattacks: Reframing the Defender Role