How can you explain cyber risk to the board?
Two recent articles, discussed in this post, attempt to describe how to explain cyber risk to the board.
information technology
The right to disconnect and IT departments
The right to disconnect refers to an employee’s right to disengage from work-related communications and other work outside of their normal working hours. Ontario enacted changes to the Employment Standards Act, 2000 (ESA) to enforce this right in organizations with 25 or more employees. The changes received royal assent on December 2, 2021, and require compliance by June 2, 2022.
At first blush, the right to disconnect may appear to be a labour and employment issue. However, IT departments will have significant roles to play in enabling compliance with the letter and spirit of the new requirements.
Organizations will be looking to their IT departments to implement technological or automated solutions. Employers around the globe have implemented solutions including the following, to comply with legislated or voluntary right to disconnect policies:
- Taking mail servers offline after business hours. Anyone emailing the organization receives an automated message that the server is
COVID-19 and electronic contracting
For years, organizations have moved their businesses digital. To consummate transactions and to otherwise engage in contractual activities, organizations have increasingly relied on electronic means of contracting using everything from webwraps and clickwraps (and hybrid variations of these forms of agreements) and electronic documents executed using electronic signatures.
