“If you can’t measure it, you can’t manage it” is often attributed to Peter Drucker, and in part it is a truism.

← Back to Blog

“If you can’t measure it, you can’t manage it” is often attributed to Peter Drucker, and in part it is a truism. One says ‘in part’ as the level of management depends on the amount of accurate information available defines reasonable and adequate decision making.Here in lies the challenge for good governance. Good governance is without doubt the foundation for good business management. Good governance relies on boards having the ability to oversight, assure and attest a companies strategy, operations, compliance, risks and financial performance. Requiring boards to possess appropriate knowledge and skills, and implement appropriate robust and reliable structures for oversight. Requiring boards to gather appropriate data to oversight and assure corporate performance.Here in lies a problem for board governance over cyber risk management, that is increasingly a regulated requirement.1. Most boards do not possess appropriate knowledge and skills.2. Appropriate corporate governance structures over cybersecurity is lacking.3. Most organisations do not manage cybersecurity and by extension do not possess access to the appropriate data.The result is most boards find it difficult to comply to their fiduciary responsibilities over the reasonable and adequate management of cybersecurity risk.@Thaddeus Dziekanowski Brian D. McCarthyVeritas GRC Forbes#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7281290020626305024