Even after the many cyberattacks initiated by Anonymous and Lulzsec, it seems boards are still not exercising appropriate governance over the privacy and security of their digital assets, that’s according to a new study by Carnegie Mellon CyLab entitled “Governance of Enterprise Security.”
The study says that “even though there are some improvements in key ‘regular’ board governance practices, less than one-third of the respondents are undertaking basic responsibilities for cyber governance. The 2012 gains against the 2010 and 2008 findings are not significant and appear to be attributable to slight shifts between ‘occasionally,’ ‘rarely,’ and ‘never.'”
A look at the numbers:
And even with the advancement of enterprise risk management throughout organizations, it seems there is still a disconnect between boards and senior executives understanding that privacy and security and IT risks are a part of ERM. A whopping 58% of those surveyed said their board did not review the organization’s insurance coverage for cyber-related risks.
The survey proved that they do not have full-time senior level personnel in place to manage privacy and security risks.
Less than two-thirds of the Forbes Global 2000 companies surveyed have full-time personnel in key roles responsible for privacy and security in a manner that is consistent with internationally accepted best practices and standards.
buy antabuse online www.dino-dds.com/wp-content/uploads/2023/10/antabuse.html no prescription pharmacyMoreover, the common practice of assigning security personnel both privacy and security responsibilities creates segregation of duties issues at line responsibility levels.
Though there are signs of progress compared to previous years, the 2012 CyLab survey shows a serious lack of attention at the top in regards to cybersecurity.