A new 16 hour online course was developed to certify board members in cybersecurity oversight. The former Homeland Security secretary and Pennsylvania governor, Tom Ridge and his company, Ridge Global collaborated with the National Association of Corporate Directors (NACD) and the Community Emergency Response Team (CERT) of the Software Engineering Institute at Carnegie Mellon University.
The course is designed to better educate board members, and evoke change from the top down, in effect the CEO saying “we are changing now.”
Legislature has been introduced to ask companies whether any employees have cybersecurity expertise, although the expertise would not be a requirement of the Cybersecurity Disclosure Act of 2017.
Mr. Ridge said, “It’s people, process and technology, and it’s culture and the culture is driven from the top.” He believes the risk of cyber attack is permanent.