Executive Summary
Marriott waited 11 weeks to reveal that 383 million customer record had been compromised, exposing at least 25 million passport numbers and 8 million payment cards. Can you imagine Marriott waiting for 11 weeks to disclose its quarterly earnings numbers? That wouldn’t be acceptable; why is waiting that long to disclose this incident? The Marriott breach offers four key lessons for senior managers and regulators: (i) cyber risk disclosure continues to be inadequate; (ii) special events such as mergers and associated cost cutting can trigger cyber breaches;…
