The European Union is taking cybersecurity risk management seriously.

← Back to Blog

The European Union is taking cybersecurity risk management seriously. It is taking the challenge of protecting critical national infrastructure and financial institutions, the cyber security of internal enabled devices, and the development of EU cybersecuirty infrastructure for incident management and response head on.

While one is not a fan of surveys and metrics over such a complex space. One needs to start to create a level of knowledge over what is going well and what is going not so well for cybersecurity. The EU ENISA 2024 cyber index is a nice example of how to create a summary for a complex picture. It dispels the myths of how many companies have faced cyberattacks; the capacity of the public and private sector to manage cyber; the investment in cyber and the percentage of companies conducting risk assessments. Doing the job properly, it gives the mean and standard deviation of results, so you get a feel for the sample size, centre and spread of data.

OK, its not accounted for every member state or every company (yes that’s a problem), but it’s a start. One the UK government could consider as it develops its cyber strategy.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC European Union Agency for Cybersecurity (ENISA)

#cybersecurity #cyberriskmanagement #cyberattack

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7342856432465141760

Categories

Cyber Risk Management, Cybersecurity

Tags