Call us now:
The board room is a complex place to work. Boards make decisions within complex working environments, markets and regulatory regimes. Cyber security is a complex practice, one which has an organisational wide impact, due to the nature of the enterprise wide risks of information and cyber security.
How do we in the security profession support the board room understand cyber and information security? Its impact on the enterprise and financial statements through what can be well orchestrated, sometimes nation sponsored attacks or disaffected members of staff.
Is cyber an elephant the board are ignoring or one they don’t understand enough about be able to make the right strategic and operational decisions? It is a complex issue, an expensive one to manage to set the strategic direction, to deliver operational solutions and to remediate in the event of a cyber attack.
But the elephant will not go away, it cannot be pushed out of the board room, it is to big, the door to small and it’s to heavy to move. But ignore it at your peril, it can be unpredictable and stampede. So how can we help boards cut the problem up into smaller pieces they can understand? To manage the risks in chunks that can be mitigated without causing serious injury?
But at pace, we don’t have the time.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6610816278884085760