For any organisation to have remote chance of managing cyber risk effectively, there has to be a focus on what it does and how it does it.

← Back to Blog

For any organisation to have remote chance of managing cyber risk effectively, there has to be a focus on what it does and how it does it. It’s about people, process and systems.

Processes drive corporate value and processes contain the controls you need to manage cyber risks. To reduce the inherent cyber risk profile you need effective controls.

Technology should be treated as an enabler of process. Get processes right you get techology right. A lack of an understanding of processes drives bad technology, which drives poor security.

People drive processes and technology both operationally and strategically. Bad decisions and bad management drives bad security.

All in all you have to get these three capabilities (amongst others) understood to manage cyber security efficiently.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6526858638533947393