LW ROUNDTABLE: Lessons from 2025 — Cyber risk got personal; accountability enters a new phase
None
<p>In 2025, the stakes changed. CISOs were hauled into courtrooms. Boards confronted a wave of shareholder lawsuits. And the rise of autonomous systems introduced fresh ambiguity and risk around who’s accountable when algorithms act.</p><h4><em><strong>Part one of a four-part series</strong></em></h4><p data-start="520" data-end="570">The reckoning wasn’t theoretical. It was personal.</p><p data-start="572" data-end="950"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/251115_Fortune-teller-squr.png" rel="nofollow"><img decoding="async" class="alignright size-thumbnail wp-image-37607" src="https://www.lastwatchdog.com/wp/wp-content/uploads/251115_Fortune-teller-squr-100x99.png" alt="" width="100" height="99" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/251115_Fortune-teller-squr-100x99.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/251115_Fortune-teller-squr-520x514.png 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/251115_Fortune-teller-squr.png 750w" sizes="(max-width: 100px) 100vw, 100px"></a>Each year, The Last Watchdog Year-End Roundtable convenes leading experts to take stock of where things stand and where they’re headed. Now in its fourth edition, the series has become a space for sharp insight over spin — a curated glimpse into what top minds across the cybersecurity landscape are seeing in the field, wrestling with behind the scenes, and preparing for next.</p><p data-start="952" data-end="1187">This year’s theme is the Accountability Reckoning. It’s a shift playing out not just in liability rulings, but also via stalled regulatory efforts, widening resilience gaps, and mounting pressure to rebuild trust across digital systems.</p><p data-start="1189" data-end="1308">To open the series, we asked: Who became newly accountable in 2025, and what kind of precedent might that set for 2026?<span id="more-37982"></span></p><p data-start="1310" data-end="1538">What came back wasn’t just a list of job titles or legal statutes. It was a map of a changing risk environment, one where personal exposure is rising, guardrails remain uncertain, and the next headlines are already taking shape.</p><div id="attachment_36877" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Arvind-Parthasarthi-hdsht.jpg" rel="nofollow"><img decoding="async" aria-describedby="caption-attachment-36877" class="size-thumbnail wp-image-36877" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Arvind-Parthasarthi-hdsht-100x117.jpg" alt="" width="100" height="117" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Arvind-Parthasarthi-hdsht-100x117.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Arvind-Parthasarthi-hdsht.jpg 307w" sizes="(max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-36877" class="wp-caption-text">Parthasarthi</p> </div><p><strong><a href="https://www.linkedin.com/in/arvindparthasarathi/" rel="nofollow">Arvind Parthasarathi</a>, </strong>CEO, <a href="https://www.cygnvs.com/" rel="nofollow">CYGNVS</a></p><p>I keep seeing accountability shift from breaches themselves to how leaders respond in the first 96 hours. More jurisdictions now impose disclosure rules that pull boards directly into incident response. Leaders need secure out of band collaboration and cross functional playbooks so decisions are clear when systems may be compromised. Frequent practice matters much more than hope. Preparation protects people and organizations when accountability becomes personal.</p><div id="attachment_37995" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Austin-Berglas-.png" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-37995" class="size-thumbnail wp-image-37995" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Austin-Berglas--100x127.png" alt="" width="100" height="127" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Austin-Berglas--100x127.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Austin-Berglas-.png 255w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-37995" class="wp-caption-text">Berglas</p> </div><p><strong><a href="https://www.linkedin.com/in/austin-berglas-9943494a/" rel="nofollow">Austin Berglas</a></strong>, Global Head of Professional Services, <a href="https://www.bluevoyant.com/" rel="nofollow">BlueVoyant</a></p><p>Executive liability has pushed cyber risk squarely into the boardroom. At BlueVoyant, we’re seeing security teams shift into advisory roles, guiding decisions rather than just defending perimeters. But true resilience demands more. Employees, vendors, and developers all carry risk exposure now. In 2026, security can’t remain a siloed function — it has to become an enterprise-wide expectation baked into leadership, culture, and code.</p><div id="attachment_37996" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Bernard-Regan-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-37996" class="size-thumbnail wp-image-37996" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Bernard-Regan-hdsht-100x124.jpg" alt="" width="100" height="124" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Bernard-Regan-hdsht-100x124.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Bernard-Regan-hdsht.jpg 144w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-37996" class="wp-caption-text">Regan</p> </div><p><strong><a href="https://www.linkedin.com/in/bernard-regan-msc-mbcs-172a0ba/" rel="nofollow">Bernard Regan</a>, </strong>Principal, <a href="https://www.bakertilly.com/" rel="nofollow">Baker Tilly</a></p><p>AI outages can expose how little leadership understands about embedded systems, contingency planning, or operational impact. Rebuilding petabyte-scale models is slow, costly, and sometimes impossible to restore to prior standards. Organizations may need manual workarounds that increase expense and revenue loss. Insurance can pay claims without restoring operations. Stress testing and executive awareness feel like overdue requirements. The real liability surfaces when AI fails and no one knows how to recover.</p><div id="attachment_37997" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Bruno-Kurtic-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-37997" class="size-thumbnail wp-image-37997" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Bruno-Kurtic-hdsht-100x115.jpg" alt="" width="100" height="115" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Bruno-Kurtic-hdsht-100x115.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Bruno-Kurtic-hdsht.jpg 142w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-37997" class="wp-caption-text">Kurtic</p> </div><p><strong><a href="https://www.linkedin.com/in/bkurtic/" rel="nofollow">Bruno Kurtic</a></strong><strong>, </strong>CEO, <a href="https://bedrockdata.ai/" rel="nofollow">Bedrock Data</a></p><p>Post breach liability will rise sharply when organizations cannot demonstrate clear visibility into sensitive data. Investigators and insurers will ask what was exposed, who owned it, and why it was not protected. Poor data hygiene will be treated as negligence, and downstream costs will follow. This pressure moves accountability beyond security teams into engineering and operations, where data creation and access must be governed as part of normal work.</p><div id="attachment_37998" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Bryan-Sacks-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-37998" class="size-thumbnail wp-image-37998" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Bryan-Sacks-hdsht-100x123.jpg" alt="" width="100" height="123" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Bryan-Sacks-hdsht-100x123.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Bryan-Sacks-hdsht-520x638.jpg 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/Bryan-Sacks-hdsht.jpg 701w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-37998" class="wp-caption-text">Sacks</p> </div><p><strong><a href="https://www.linkedin.com/in/bryansacks/" rel="nofollow">Bryan Sacks</a>, </strong>Field CISO, <a href="https://myriad360.com/" rel="nofollow">Myriad360</a></p><p>Executive liability is shifting fast. Regulations like NIS2 create real exposure for boards and the C Suite, and cyber is becoming a strategic advantage rather than a cost center. Leaders are now judged on governance and resource choices instead of organizational charts. Accountability is shared, and excuses age poorly. Chasing every mandate will not win. Strong baselines let organizations steer change instead of scrambling to react.</p><div id="attachment_29628" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Camellia-Chan-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-29628" class="size-thumbnail wp-image-29628" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Camellia-Chan-hdsht-100x114.jpg" alt="chan" width="100" height="114" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Camellia-Chan-hdsht-100x114.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Camellia-Chan-hdsht-520x595.jpg 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/Camellia-Chan-hdsht.jpg 628w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-29628" class="wp-caption-text">Chan</p> </div><p><strong><a href="https://www.linkedin.com/in/camellia-chan/" rel="nofollow">Camellia Chan</a>, </strong>CEO, <a href="https://x-phy.com/" rel="nofollow">X-PHY Inc</a></p><p>Personal accountability for CISOs increased sharply in 2025, but vulnerability based breaches still grew as IoT and edge devices remained unpatched. Accountability without architectural change feels hollow when attackers move in days and remediation takes weeks. Small businesses take the biggest hit, creating systemic risk across supply chains. True liability shifts require security that starts at the silicon, not after the fact, because software patches rarely keep pace with exploitation.</p><div id="attachment_38024" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Christie-Terrill-hdsht2.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38024" class="size-thumbnail wp-image-38024" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Christie-Terrill-hdsht2-100x115.jpg" alt="" width="100" height="115" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Christie-Terrill-hdsht2-100x115.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Christie-Terrill-hdsht2-520x597.jpg 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/Christie-Terrill-hdsht2.jpg 641w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38024" class="wp-caption-text">Terrill</p> </div><p><strong><a href="https://www.linkedin.com/in/cgrabyan/" rel="nofollow">Chris</a></strong><strong><a href="https://www.linkedin.com/in/cgrabyan/" rel="nofollow">tie Terrill</a></strong><strong>, </strong>CISO, <a href="https://bishopfox.com/" rel="nofollow">Bishop Fox</a></p><p>We’re entering a phase where CISOs won’t control AI adoption — but we’ll still be on the hook for the risk. I’m already seeing shadow AI projects, vague cost structures, and loose data sharing create real exposure. The pace is relentless. Our job now is to navigate unpredictable risks in real time, not just enforce static policies. It’s about enabling outcomes without losing visibility or control.</p><div id="attachment_38000" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/CHuck-Randolph.png" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38000" class="size-thumbnail wp-image-38000" src="https://www.lastwatchdog.com/wp/wp-content/uploads/CHuck-Randolph-100x122.png" alt="" width="100" height="122" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/CHuck-Randolph-100x122.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/CHuck-Randolph.png 186w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38000" class="wp-caption-text">Randolph</p> </div><p><strong><a href="https://www.linkedin.com/in/chuckrandolph/" rel="nofollow">Chuck Randolph</a></strong>, SVP, <a href="https://360privacy.io/" rel="nofollow">360 Privacy</a></p><p>In 2025, I watched accountability move from theory to courtroom. CISOs, CSOs, even HR chiefs found themselves exposed — not just operationally, but personally. The risk perimeter has changed. Smart teams are mapping exposure, red-teaming reputational threats, and shifting from siloed roles to shared risk awareness. Because in this new environment, protection isn’t just about security. It’s about foresight, trust, and acting before risk turns to regret</p><div id="attachment_38001" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/David-Sequino-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38001" class="size-thumbnail wp-image-38001" src="https://www.lastwatchdog.com/wp/wp-content/uploads/David-Sequino-hdsht-100x130.jpg" alt="" width="100" height="130" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/David-Sequino-hdsht-100x130.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/David-Sequino-hdsht.jpg 382w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38001" class="wp-caption-text">Sequino</p> </div><p><strong><a href="https://www.linkedin.com/in/mr-david-r-sequino-b5257b7/" rel="nofollow">David Sequino</a>, </strong>CEO, <a href="https://www.ghsiss.com/" rel="nofollow">Integrity Security Services</a></p><p>AI agents aren’t just tools anymore — they’re actors, and we need to treat them that way. In 2026, I expect to see formal accountability for machine behavior. That means treating every AI system as a managed identity with a provable chain of trust. When it comes to critical infrastructure, Trust Lifecycle Management is the only path forward. Securing the humans isn’t enough. We’ve got to govern the machines too.</p><div id="attachment_38002" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Diana-Kelley-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38002" class="size-thumbnail wp-image-38002" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Diana-Kelley-hdsht-100x125.jpg" alt="" width="100" height="125" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Diana-Kelley-hdsht-100x125.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Diana-Kelley-hdsht.jpg 490w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38002" class="wp-caption-text">Kelley</p> </div><p><strong><a href="https://www.linkedin.com/in/dianakelleysecuritycurve/" rel="nofollow">Diana Kelley</a>, </strong>CISO, <a href="https://noma.security/" rel="nofollow">Noma Security</a></p><p>Personal liability for compliance failures is becoming a defining concern for CISOs and it is driven by real enforcement. High profile cases like Uber and SolarWinds set a precedent that leadership can face individual consequences for security decisions. Meanwhile, NIS2 holds management responsible for cyber risk management. Many CISOs lack D and O coverage, so liability insurance and documented governance become essential. Recruitment and retention now depend on meaningful protection.</p><div id="attachment_38003" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Erez-Tadmor-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38003" class="size-thumbnail wp-image-38003" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Erez-Tadmor-hdsht-100x116.jpg" alt="" width="100" height="116" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Erez-Tadmor-hdsht-100x116.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Erez-Tadmor-hdsht.jpg 341w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38003" class="wp-caption-text">Tadmor</p> </div><p><strong><a href="https://www.linkedin.com/in/ereztadmor/" rel="nofollow">Erez Tadmor</a>, </strong>Field CTO, <a href="https://www.tufin.com/" rel="nofollow">Tufin</a></p><p>Accountability shifted to preemptive network security in 2025. AI data centers expanded faster than teams could track, creating exposures no one explicitly caused yet everyone owned. Boards and regulators now expect continuous understanding of real network pathways, not quarterly diagrams. Larger enterprises moved to automated validation and exposure governance. Under-resourced organizations struggled with AI-scale change. Leaders are judged on whether they prevent network exposure before incidents happen.</p><div id="attachment_38004" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Frank-Balonis-hdsht-1.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38004" class="size-thumbnail wp-image-38004" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Frank-Balonis-hdsht-1-100x119.jpg" alt="" width="100" height="119" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Frank-Balonis-hdsht-1-100x119.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Frank-Balonis-hdsht-1-520x621.jpg 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/Frank-Balonis-hdsht-1.jpg 649w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38004" class="wp-caption-text">Balonis</p> </div><p><strong><a href="https://www.linkedin.com/in/frank-balonis-47317913/" rel="nofollow">Frank Balonis</a>, </strong>CISO, <a href="https://www.kiteworks.com/" rel="nofollow">Kiteworks</a></p><p>I see accountability shifting directly to individuals. The Joe Sullivan case showed prosecutors are willing to pursue personal consequences for security decisions. I expect that to expand across vendors and developers as global regulations test new boundaries. Leadership cannot assume liability sits with victims anymore. Secure by design and honest disclosure are becoming table stakes. In 2026, personal consequences will shape how security gets done.</p><div id="attachment_38009" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Gabrielle-Hempel-Hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38009" class="size-thumbnail wp-image-38009" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Gabrielle-Hempel-Hdsht-100x116.jpg" alt="" width="100" height="116" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Gabrielle-Hempel-Hdsht-100x116.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Gabrielle-Hempel-Hdsht.jpg 464w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38009" class="wp-caption-text">Hempel</p> </div><p><strong><a href="https://www.linkedin.com/in/gabrielle-hempel/" rel="nofollow">Gabrielle Hempel</a>, </strong>Security Operations Strategist, <a href="https://www.exabeam.com/" rel="nofollow">Exabeam</a></p><p>Security and legal teams are beginning to operate as one function because AI incidents create disclosure obligations that cannot be handled after the fact. Hybrid roles will emerge to understand both adversarial behavior and legal requirements. The distinction between research tooling and active attack tools will fade. Organizations need to know what is permissible, who is accountable, and how to respond as AI driven incidents move into formal liability territory.</p><div id="attachment_38012" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Gareth-Lindahl-Wise-.png" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38012" class="size-thumbnail wp-image-38012" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Gareth-Lindahl-Wise--100x117.png" alt="" width="100" height="117" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Gareth-Lindahl-Wise--100x117.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Gareth-Lindahl-Wise-.png 205w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38012" class="wp-caption-text">Lindahl-Wise</p> </div><p><strong><a href="https://www.linkedin.com/in/gareth-lindahl-wise-%F0%9F%8F%89-5720851/" rel="nofollow">Gareth Lindahl-Wise</a>, </strong>CISO, <a href="http://ontinue.com/" rel="nofollow">Ontinue</a></p><p>Personal liability will keep rising for CISOs who have not adjusted their role to the strategic expectations now placed on them. Transparency between CISO and board becomes essential because unspoken issues turn into personal exposure. Accountability should drive open conversations instead of silent risks. The challenge is navigating business politics while shifting responsibility to leadership. Success depends on clear communication, documented decisions, and a willingness to surface uncomfortable truths.</p><div id="attachment_38019" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Heath-SRenfrow-hdsht.png" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38019" class="size-thumbnail wp-image-38019" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Heath-SRenfrow-hdsht-100x122.png" alt="" width="100" height="122" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Heath-SRenfrow-hdsht-100x122.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Heath-SRenfrow-hdsht.png 459w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38019" class="wp-caption-text">Renfrow</p> </div><p><strong><a href="https://www.linkedin.com/in/heath-renfrow-245187124/" rel="nofollow">Heath Renfrow</a>, </strong>CISO, <a href="https://fenix24.com/" rel="nofollow">Fenix24</a></p><p>Personal liability for compliance failures is still intensifying. Regulators are signaling that ignorance is no longer a defense, and CISOs may be held accountable if governance and documentation fall short. The winning approach is pushing formal risk ownership to the business and keeping real-time records of decisions. Personal liability becomes manageable when the CISO is the advisor who enables visibility, not the lone decision maker responsible for every outcome.</p><div id="attachment_38020" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Isaac-Kohen-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38020" class="size-thumbnail wp-image-38020" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Isaac-Kohen-hdsht-100x126.jpg" alt="" width="100" height="126" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Isaac-Kohen-hdsht-100x126.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Isaac-Kohen-hdsht.jpg 390w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38020" class="wp-caption-text">Kohen</p> </div><p><strong><a href="https://www.linkedin.com/in/isaackohen/" rel="nofollow">Isaac Kohen</a>, </strong>Chief Product Officer, <a href="https://www.teramind.co/" rel="nofollow">Teramind</a></p><p>Liability pressure is driving security leaders to consider personal cyber insurance. That shift makes hiring and retention harder because CISOs feel accountable without the authority to fund defenses. The accountability era rewards defensible choices, not bold security improvements. When budgets sit with finance and liability sits with security, talent will leave for safer roles. Compliance might increase, but actual security suffers if expertise exits under personal threat.</p><div id="attachment_38021" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38021" class="size-thumbnail wp-image-38021" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht-100x119.jpg" alt="" width="100" height="119" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht-100x119.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht-520x620.jpg 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht-960x1144.jpg 960w, https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht-768x915.jpg 768w, https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht-1289x1536.jpg 1289w, https://www.lastwatchdog.com/wp/wp-content/uploads/Jimmy-Astle-hdsht.jpg 1446w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38021" class="wp-caption-text">Astle</p> </div><p><strong>Jimmy Astle, </strong>Senior Director, Validation & Data Science, <a href="https://redcanary.com/" rel="nofollow">Red Canary</a></p><p>Autonomous agents are headed for tighter constraints as governments shift attention to who can deploy them and how much data they can access. Regulation will focus on limiting autonomy in sensitive sectors and requiring stronger oversight, approval, and audit paths. Teams will need to demonstrate clear guardrails and prevent repurposed behavior. As agents become operational, accountability moves closer to the people authorizing their actions.</p><div id="attachment_38022" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Jonathan-Gill_hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38022" class="size-thumbnail wp-image-38022" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Jonathan-Gill_hdsht-100x125.jpg" alt="" width="100" height="125" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Jonathan-Gill_hdsht-100x125.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Jonathan-Gill_hdsht.jpg 331w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38022" class="wp-caption-text">Gill</p> </div><p><strong><a href="https://www.linkedin.com/in/jlgill/" rel="nofollow">Jonathan Gill</a>, </strong>CEO, <a href="https://panaseer.com/" rel="nofollow">Panaseer</a></p><p>Boards will see direct fallout from the next wave of breaches. A board member at a major company could lose their job as scrutiny grows and class actions become a new normal. CISOs cannot shoulder accountability alone because cyber risk is business risk. The industry will move away from treating CISOs as scapegoats. Shared accountability provides resilience and gives CISOs the visibility required to challenge and influence risky decisions.</p><div id="attachment_38023" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Manoj-Srivastava-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38023" class="size-thumbnail wp-image-38023" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Manoj-Srivastava-hdsht-100x124.jpg" alt="" width="100" height="124" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Manoj-Srivastava-hdsht-100x124.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Manoj-Srivastava-hdsht.jpg 432w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38023" class="wp-caption-text">Srivastava</p> </div><p><strong><a href="https://www.linkedin.com/in/manojsrivastava77/" rel="nofollow">Manoj Srivastava</a></strong><strong>, </strong>CTO, <a href="https://blackpointcyber.com/" rel="nofollow">Blackpoint Cyber</a></p><p>Personal accountability for CISOs is no longer theoretical. Enforcement actions and vendor liability models now assign individual exposure for insecure practices. Courts are testing shared responsibility agreements in the cloud and clarifying where risk truly sits. Compensation packages already link security performance to executive outcomes. Insurance carriers demand attestations that name responsible officers. Cybersecurity becomes a fiduciary duty tied to personal financial and legal consequences, not just organizational posture.</p><div id="attachment_38029" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Mehran-Farimani-hdshtjpg.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38029" class="size-thumbnail wp-image-38029" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Mehran-Farimani-hdshtjpg-100x124.jpg" alt="" width="100" height="124" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Mehran-Farimani-hdshtjpg-100x124.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Mehran-Farimani-hdshtjpg.jpg 493w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38029" class="wp-caption-text">Farimani</p> </div><p><strong><a href="https://www.linkedin.com/in/farimani/" rel="nofollow">Mehran Farimani</a>,</strong> CEO, <a href="https://www.rapidfort.com/" rel="nofollow">RapidFort</a></p><p>Liability concentrated in 2025. New laws expanded personal exposure for board members and created fixed disclosure timelines. CISOs now answer for internal security and the risks created by suppliers, partners, and open-source code. Requirements like FedRAMP and CMMC also push expectations down to smaller vendors. Insurance pressure makes fast remediation mandatory. The result is a downstream accountability model where every part of the ecosystem now carries measurable responsibility.</p><div id="attachment_38030" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Michael-Bell-_-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38030" class="size-thumbnail wp-image-38030" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Michael-Bell-_-hdsht-100x119.jpg" alt="" width="100" height="119" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Michael-Bell-_-hdsht-100x119.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Michael-Bell-_-hdsht.jpg 497w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38030" class="wp-caption-text">Bell</p> </div><p><strong><a href="https://www.linkedin.com/in/artificial-mike/" rel="nofollow">Michael Bell</a>, </strong>CEO, <a href="https://suzulabs.com/" rel="nofollow">Suzu Labs</a></p><p>Enterprises deploying AI systems cannot outsource accountability for model outputs or training data to their providers. Attacks like the Whisper Leak showed that due diligence requires questions about traffic analysis, provenance, and security testing. AI vendors that shipped capability first face new procurement pressure. In 2026, organizations will be judged not just on implementation but on vendor selection choices. The accountability shift forces security by design, not retrofit.</p><div id="attachment_38031" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Morey_Haber-hdsht.png" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38031" class="size-thumbnail wp-image-38031" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Morey_Haber-hdsht-100x119.png" alt="" width="100" height="119" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Morey_Haber-hdsht-100x119.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Morey_Haber-hdsht.png 520w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38031" class="wp-caption-text">Haber</p> </div><p><strong><a href="https://www.linkedin.com/in/mjhaber/" rel="nofollow">Morey J. Haber</a>, </strong>Chief Security Advisor, <a href="https://www.beyondtrust.com/" rel="nofollow">BeyondTrust</a></p><p>Liability became personal in 2025 because cybersecurity stopped being a single department’s job. Breaches exposed software suppliers, cloud providers, system integrators, and boards that approved risky investments. The industry is shifting toward shared accountability across every technology decision, including provisioning, vendor access, and supply chain partners. Negligence now carries consequences, and transparency sits with every executive. Cybersecurity moved from departmental oversight to a regulated responsibility tied to measurable risk.</p><div id="attachment_38032" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Pierre_Lamy-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38032" class="size-thumbnail wp-image-38032" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Pierre_Lamy-hdsht-100x130.jpg" alt="" width="100" height="130" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Pierre_Lamy-hdsht-100x130.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Pierre_Lamy-hdsht-520x675.jpg 520w, https://www.lastwatchdog.com/wp/wp-content/uploads/Pierre_Lamy-hdsht.jpg 613w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38032" class="wp-caption-text">Lamy</p> </div><p><strong><a href="https://www.linkedin.com/in/pierre-lamy-1735457/" rel="nofollow">Pierre Lamy</a>, </strong>Principal Threat Researcher, <a href="https://www.anomali.com/" rel="nofollow">Anomali</a></p><p>Accountability shifted in 2025 and security failures now have visible owners. CISOs, cloud operators, and AI vendors face new liability as outages rise and consolidation concentrates risk. AI helped experts, but it did not replace skill. Less trained teams created gaps that attackers quickly used. In 2026, success depends on high fidelity intelligence and architectures that distribute risk instead of depending on a few dominant platforms.</p><div id="attachment_38034" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Randolph-Barr-hsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38034" class="size-thumbnail wp-image-38034" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Randolph-Barr-hsht-100x120.jpg" alt="" width="100" height="120" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Randolph-Barr-hsht-100x120.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Randolph-Barr-hsht.jpg 513w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38034" class="wp-caption-text">Barr</p> </div><p><strong><a href="https://www.linkedin.com/in/randolphbarr/" rel="nofollow">Randolph Barr</a>, </strong>CISO, <a href="https://www.cequence.ai/" rel="nofollow">Cequence Security</a></p><p>CISOs are reconsidering traditional roles because personal liability now sits uncomfortably close to the job. Recent cases have many security leaders exploring fractional or vCISO models that reduce exposure while still contributing expertise. The title itself feels risky when high profile incidents trigger regulatory or legal scrutiny. Fractional roles offer a way to serve multiple companies without becoming the single point of accountability when a complex failure lands in court.</p><div id="attachment_38035" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Reuven_Rubi-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38035" class="size-thumbnail wp-image-38035" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Reuven_Rubi-hdsht-100x127.jpg" alt="" width="100" height="127" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Reuven_Rubi-hdsht-100x127.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Reuven_Rubi-hdsht.jpg 282w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38035" class="wp-caption-text">Aronashvili</p> </div><p><strong><a href="https://www.linkedin.com/in/reuven-aronashvili/" rel="nofollow">Reuven (Rubi) Aronashvili</a></strong>, CEO, <a href="https://cyesec.com/" rel="nofollow">CYE</a></p><p>At CYE, we’re seeing CISOs take on a much wider scope. Cyber threats are no longer confined to the digital realm — they’re bleeding into the physical world, while AI races ahead of regulation. In 2026, CISOs must lead not just on security, but on strategy, talent, and resilience. It’s not just about defending systems anymore. It’s about helping the business operate safely amid nonstop disruption.</p><div id="attachment_38036" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Sumit-Johar-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38036" class="size-thumbnail wp-image-38036" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Sumit-Johar-hdsht-100x120.jpg" alt="" width="100" height="120" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Sumit-Johar-hdsht-100x120.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Sumit-Johar-hdsht.jpg 462w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38036" class="wp-caption-text">Johar</p> </div><p><strong><a href="https://www.linkedin.com/in/sumit-johar/" rel="nofollow">Sumit Johar</a>, </strong>CIO, <a href="https://www.blackline.com/" rel="nofollow">BlackLine</a></p><p>AI could be a competitive advantage or a new liability for finance depending on how well CIOs and CFOs collaborate on governance, spending, and adoption. Rapid capabilities tempt teams to overspend or choose tools with unclear value. Without shared oversight, AI becomes another round of SaaS sprawl with hidden compliance exposure. Treating CIO and CFO as co-chairs of AI decision making helps align innovation with accountability and measurable outcomes.</p><div id="attachment_38037" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Todd-Thorsen-hdsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38037" class="size-thumbnail wp-image-38037" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Todd-Thorsen-hdsht-100x126.jpg" alt="" width="100" height="126" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Todd-Thorsen-hdsht-100x126.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Todd-Thorsen-hdsht.jpg 176w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38037" class="wp-caption-text">Thorsen</p> </div><p><strong><a href="https://www.linkedin.com/in/todd-thorsen-7015bb65/" rel="nofollow">Todd Thorsen,</a> </strong>CISO, <a href="https://www.crashplan.com/" rel="nofollow">CrashPlan</a></p><p>Liability is widening in 2025 and it is no longer just about the company or the CISO. Risk is flowing downstream to software vendors and providers through product liability and negligence. At the same time, boards are becoming responsible for cybersecurity governance. That shift means failures cannot be treated as technical events. They turn into governance, product, and legal failures with real personal accountability across the ecosystem.</p><div id="attachment_38038" style="width: 110px" class="wp-caption alignright"><a href="https://www.lastwatchdog.com/wp/wp-content/uploads/Trey-Ford-hsht.jpg" rel="nofollow"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-38038" class="size-thumbnail wp-image-38038" src="https://www.lastwatchdog.com/wp/wp-content/uploads/Trey-Ford-hsht-100x125.jpg" alt="" width="100" height="125" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Trey-Ford-hsht-100x125.jpg 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Trey-Ford-hsht.jpg 517w" sizes="auto, (max-width: 100px) 100vw, 100px"></a> <p id="caption-attachment-38038" class="wp-caption-text">Ford</p> </div><p><strong><a href="https://www.linkedin.com/in/treyford/" rel="nofollow">Trey Ford</a>, </strong>Chief Strategy and Trust Officer, <a href="https://www.bugcrowd.com/" rel="nofollow">Bugcrowd</a></p><p>CISOs have carried the burden of incident accountability, even though they do not control every defensive decision. SolarWinds showed the imbalance when only the CISO’s name surfaced, while the CEO’s did not. Dropped charges signal a shift away from treating CISOs as scapegoats. The CISO informs risk and marshals response, but decisions belong to the business. Mature organizations recognize shared responsibility rather than placing blame on a single role.</p><div id="attachment_19055" class="wp-caption alignright"> <p><img decoding="async" class="size-thumbnail wp-image-19055 lazy-loaded ls-is-cached lazyloaded " src="https://www.lastwatchdog.com/wp/wp-content/uploads/Byron-Acohido-BW-column-mug-100x123.png" sizes="(max-width: 100px) 100vw, 100px" srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Byron-Acohido-BW-column-mug-100x123.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Byron-Acohido-BW-column-mug.png 374w" alt="" width="100%" data-src="https://www.lastwatchdog.com/wp/wp-content/uploads/Byron-Acohido-BW-column-mug-100x123.png" data-srcset="https://www.lastwatchdog.com/wp/wp-content/uploads/Byron-Acohido-BW-column-mug-100x123.png 100w, https://www.lastwatchdog.com/wp/wp-content/uploads/Byron-Acohido-BW-column-mug.png 374w"></p> <p class="wp-caption-text">Acohido</p> </div><p><em><a href="https://www.lastwatchdog.com/pulitzer-centennial-highlights-role-journalism/" rel="nofollow">Pulitzer Prize-winning </a>business journalist Byron V. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be.</em></p><hr><p><em>(<strong>Editor’s note:</strong> This feature was assembled with the assistance of ChatGPT, using human-led editorial judgment to shape, refine, and voice-check each entry.)</em></p><p>The post <a href="https://www.lastwatchdog.com/lw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase/">LW ROUNDTABLE: Lessons from 2025 — Cyber risk got personal; accountability enters a new phase</a> first appeared on <a href="https://www.lastwatchdog.com/">The Last Watchdog</a>.</p><div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2025/12/lw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase/" data-a2a-title="LW ROUNDTABLE: Lessons from 2025 — Cyber risk got personal; accountability enters a new phase"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2025%2F12%2Flw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase%2F&linkname=LW%20ROUNDTABLE%3A%20Lessons%20from%202025%20%E2%80%94%20Cyber%20risk%20got%20personal%3B%20accountability%20enters%20a%20new%20phase" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2025%2F12%2Flw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase%2F&linkname=LW%20ROUNDTABLE%3A%20Lessons%20from%202025%20%E2%80%94%20Cyber%20risk%20got%20personal%3B%20accountability%20enters%20a%20new%20phase" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2025%2F12%2Flw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase%2F&linkname=LW%20ROUNDTABLE%3A%20Lessons%20from%202025%20%E2%80%94%20Cyber%20risk%20got%20personal%3B%20accountability%20enters%20a%20new%20phase" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2025%2F12%2Flw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase%2F&linkname=LW%20ROUNDTABLE%3A%20Lessons%20from%202025%20%E2%80%94%20Cyber%20risk%20got%20personal%3B%20accountability%20enters%20a%20new%20phase" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2025%2F12%2Flw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase%2F&linkname=LW%20ROUNDTABLE%3A%20Lessons%20from%202025%20%E2%80%94%20Cyber%20risk%20got%20personal%3B%20accountability%20enters%20a%20new%20phase" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div><p class="syndicated-attribution">*** This is a Security Bloggers Network syndicated blog from <a href="https://www.lastwatchdog.com">The Last Watchdog</a> authored by <a href="https://securityboulevard.com/author/0/" title="Read other posts by bacohido">bacohido</a>. Read the original post at: <a href="https://www.lastwatchdog.com/lw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase/">https://www.lastwatchdog.com/lw-roundtable-lessons-from-2025-cyber-risk-got-personal-accountability-enters-a-new-phase/</a> </p>