Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
Should cyber security be included in compliance training?
Cyber Security: A Peer-Reviewed Journal,
1
(4),
294-300
(2018)
Abstract
Would it be beneficial for cyber security professionals to cooperate with the compliance function? Would such cooperation improve the security of organisations and companies? And if so, what is the best place to start working together? Analysis of both cyber security and compliance shows that aligning them in the area of training and knowledge transfer to employees/users is the answer. Compliance management systems require organisations to have effective awareness building and training processes focused on communicating rules and promoted behaviours. These rules and behaviours do not usually include cyber security topics, but adding them would not only help to disseminate the knowledge necessary in a digital world but would also ensure that important risk factors are not omitted from the compliance point of view.
Keywords: cyber security; cyber; compliance; training; risk
The full article is available to subscribers to the journal.
Author's Biography
Piotr Chmiel CFE, CISA, CIA is compliance expert at T-Mobile Polska S.A. He started his career at Andersen, advising clients on IT security and process effectiveness. After moving to PricewaterhouseCoopers he shifted his focus to internal audit and process controls, advising and auditing companies implementing Sarbanes-Oxley Act requirements and advising companies transitioning to digital business. In 2009 he joined T-Mobile Polska S.A. (subsidiary of Deutsche Telekom Group) to implement its compliance management system, where the successful introduction of new rules and processes led to effective compliance function development, as confirmed by external audits. He is currently responsible for daily operational work with the focus on compliance investigations and advisory. He holds CISA, CIA and CFE certifications and was elected President of Polish ACFE Chapter in 2016. In 2016 he successfully passed the International Compliance Manager course at Frankfurt School of Finance and Management. He has Masters and engineering degrees from the Nuclear Physics and Technology Faculty at the Academy of Mining and Metallurgy in Cracow, Poland, where he specialised in nuclear medicine and dosimetry.
