S&P Global says early detection programs are key piece of companies’ cyber governance

A new paper from S&P Global Ratings recommends companies focus on rapid detection of cyber threats on their systems, urging risk managers to embrace logging, monitoring and threat hunting programs.

“The presence, or absence, of a cyber threat detection mechanism at an issuer is unlikely to have direct credit rating implications,” S&P Global says in “Cyber Risks Insights: Detection Is Key to Defense.”

“However,” it says, “we consider that weaknesses in an entity's threat detection capabilities indicates deficiencies in operational...