Re: New day
Target was certainly mentioned frequently as an example of how an organization can get stung, but board level officers weren't necessarily represented at the GRC event (or if they were, I didn't meet them).
One other example that came up was General Motors, not for cybersecurity but for the reputational risk associated for failing to act on vehicle safety problems. The couple of GM risk management specialists at the conference said they couldn't talk much about that example, other than to say that they no longer have a chief risk officer. After getting called on the carpet in front of Congress, GM CEO Mary Barra told staff she considered herself the CRO -- because it was ultimately her neck that was on the line if the company suffered another embarrassment like that.