What does your CEO need to know about cybersecurity?
Cybersecurity Dive
|
Contributed by: Drex DeFord
Summary
UnitedHealth Group's CEO, Andrew Witty, testified before Congress regarding a cyberattack on its subsidiary, Change Healthcare, which disrupted various services for months and compromised the personal and health information of a significant portion of Americans. The event underscored the increasing importance of CEO involvement in cybersecurity, shifting from a traditional IT concern to a critical business and operational strategy. This breach, caused by insufficient security measures such as the lack of multifactor authentication, led to the company paying a $22 million ransom. The incident highlights the heightened expectations and potential legal liabilities for CEOs in maintaining robust cybersecurity frameworks and their active role in preemptive and reactive measures to protect their organizations.
