A CISO's Guide to Avoiding Jail After a Breach

This Dark Reading article examines a trend of increasing government enforcement and prosecution of security leaders following major breaches (highlighting Joe Sullivan's Uber case), arguing that regulators are shifting responsibility onto corporations’ security officers; it warns this may deter qualified candidates and degrade defensive quality. It recommends that CISOs understand investigative processes, build cross-functional risk councils, document decisions, and improve communication to distribute accountability and reduce the risk of being singled out.