www.cisa.gov/resources-to...
www.cisa.gov/resources-to...
The materiality of a security incident is a legal determination.
CISOs you should not be making this call. You do not want to make this call. Loop in your lawyer.
Also make sure your company (if public) has a process for determining materiality and reporting.
The materiality of a security incident is a legal determination.
CISOs you should not be making this call. You do not want to make this call. Loop in your lawyer.
Also make sure your company (if public) has a process for determining materiality and reporting.