Even in the face of the known risks posed by cyber attacks, many corporate boards are not taking the proper steps to address cyber-security issues, says a Securities and Exchange Commission official.

Speaking June 10 at the New York Stock Exchange, Luis A. Aguilar, an SEC commissioner since 2008, said, "Given the significant cyber attacks that are occurring with disturbing frequency, and the mounting evidence that companies of all shapes and sizes are increasingly under a constant threat of potentially disastrous cyber attacks, ensuring the adequacy of a company's cyber-security measures needs to be a critical part of a board of director's risk-oversight responsibilities."

But he says even as the risks companies face have been front and center with recent high-profile attacks, "evidence suggests that there may be a gap that exists between the magnitude of the exposure presented by cyber risks and the steps, or lack thereof, that many corporate boards have taken to address these risks."

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

  • All PropertyCasualty360.com news coverage, best practices, and in-depth analysis.
  • Educational webcasts, resources from industry leaders, and informative newsletters.
  • Other award-winning websites including BenefitsPRO.com and ThinkAdvisor.com.
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.