A number of years ago, Section 501(B) of the Gramm-Leach-Bliley Act mandated banking institutions to have an effective information security program in-place to protect their customer’s information. But what about all the other organizations – small and large – in the wild out there? Who is asking them about their information security programs? Do you think the Board of Directors at a certain retail chain or a grocery supermarket were briefed on the state of information security at their organizations? It’s not the age-old issue of accepting a certain risk without completely understanding the impact of that risk to the organization and its customers?”]
Source: https://www.cuinfosecurity.com/blogs/bankers-be-our-societys-security-leaders-p-50