Personal Liability, Security Becomes Bigger Issues For CISOs
Dark Reading, Friday, August 22nd, 2025
While the furor from CISO prosecutions has died down, worries continue over a lack of liability protections and potential targeting by cybercriminals and hackers for their privileged roles.
Chuck Norton had only been on the job as the chief information security officer at Western Michigan University for a few months when a jury found another CISO - of ride-hailing app Uber - guilty of covering up a compromise.
Norton was concerned about the potential to be held criminally liable for a breach - or the response to a compromise - and sought to make legal protections part of his contract. While he received verbal assurances, he realized that those promises would not be in writing.