Speaking at a cyber loss management seminar, former Interim Privacy Commissioner of Canada Chantal Bernier offered advice for companies facing cyberattacks, Canadian Underwriter reports. Bernier said CEOs should be the ones who make the decision on whether to report a data breach, rather than the CIOs who are normally tasked with the role. “Why should it be on the CEO’s desk, instead of the CIO?” Bernier said. “The reputational status, the financial status of an organization is too significant for it not to be a decision of the CEO.” The former commissioner said organizations should have a definition in place for “real risk of significant harm,” as well as set roles for everyone to have following a breach.
Full Story