CyberHappenings logo
☰
🏠 Home 📂 Browse ℹ️ About

Track cybersecurity events as they unfold. Sourced timelines, daily updates. Fast, privacy‑respecting. No ads, no tracking.

Increased Legal Risks and Personal Liability Concerns for CISOs

First reported
Last updated
📰 1 unique sources, 1 articles

Summary

Hide ▲

Chief Information Security Officers (CISOs) are facing heightened legal risks and personal liability concerns. Recent legal actions against CISOs, such as the conviction of Uber's former CISO, have led to increased scrutiny and a reevaluation of legal protections for CISOs. Many CISOs are now seeking contractual protections and reassessments of their roles and responsibilities. The increased risks do not always correlate with increased support or budget, and the focus on liability mitigation may not necessarily improve an organization's security posture.

Timeline

  1. 22.08.2025 14:59 📰 1 articles · ⏱ 25d ago

    CISOs Seek Legal Protections Amid Increased Liability Concerns

    Recent legal actions against CISOs, including the conviction of Uber's former CISO and charges against SolarWinds and its CISO, have led to increased scrutiny and a reevaluation of legal protections for CISOs. Many organizations have made policy changes to address these concerns, but the focus on liability mitigation may not necessarily improve security posture. CISOs are also facing increased personal safety threats, including deepfake attacks and social media-based phishing campaigns.

    Show sources
    Open in new tab

Information Snippets

  • Uber's former CISO, Joseph Sullivan, was convicted in 2023 for covering up a data breach, a case currently under appeal.

    First reported: 22.08.2025 14:59
    📰 1 source, 1 article
    Show sources

  • The SEC charged SolarWinds and its CISO with fraud and internal control failures in 2023.

    First reported: 22.08.2025 14:59
    📰 1 source, 1 article
    Show sources

  • 93% of organizations have made policy changes in the past 12 months to address CISOs' personal liability concerns.

    First reported: 22.08.2025 14:59
    📰 1 source, 1 article
    Show sources

  • 38% of companies have increased scrutiny of documents filed with the SEC, and 38% have pledged to provide more legal protections for cybersecurity staff.

    First reported: 22.08.2025 14:59
    📰 1 source, 1 article
    Show sources

  • CISOs are increasingly concerned about personal safety threats, including deepfake attacks and social media-based phishing campaigns.

    First reported: 22.08.2025 14:59
    📰 1 source, 1 article
    Show sources