Daniels discusses the shift of responsibility for insider threats from the IT department to the legal department.
Daniels comments in the past 5 years that he has “seen CISOs and cybersecurity folks actually moving over to legal and reporting directly into the legal department,” as general counsel began to understand the “amount of liability they carry that comes with client information.”
“It’s very difficult to negotiate confidentiality and breach standards, and it’s also an area impossible to create stop loss,” Daniels explains.