Since former Uber CSO Joe Sullivan was charged in August with two felonies for failing to report a 2016 breach that exposed 607,000 personal records, CISOs are scrambling to determine their own personal liability for breaches in their organizations. The charges — obstruction of justice and misprision of a felony (failure to report a crime) — carry with them the potential of jail time of up to five years and three years, respectively.
(Insider Story)