The former security officer of Uber, Joe Sullivan, has been convicted on criminal charges in relation to a data breach. The breach took place in 2016 and affected 57 million Uber riders and drivers around the world. Sullivan was convicted of obstruction of proceedings of the Federal Trade Commission, but experts say the judgement is unfair. Jody R. Westby at Forbes says the blame should lie with the C-Suite, not a single CISO or CSO. She said: “In a cyber context, meeting the duty of loyalty and exercising good faith oversight could be interpreted to mean that boards have identified key cyber risks and established an information and reporting system with critical information flows about these risks and a process to monitor them.”
