New Delhi : , Nearly 88% of board directors see cybersecurity as a risk to the business, rather than a threat to technology.A new study shows that only 12 percent of boards have a cybersecurity committee at the board level. Gartner, a global market research company, states that even though business leaders recognize the importance of protecting their enterprise from evolving threats, IT leadership is responsible for security.
Gartner discovered that 88% of organizations held the CIO or CISO responsible for cybersecurity, while only 10% held senior IT managers accountable.
Paul Proctor (distinguished research vice president at Gartner) stated that “it’s now for executive leaders outside of IT and to assume responsibility for the security of the enterprise.”
He said that the influx in ransomware attacks and supply chain attacks observed throughout 2021 (many of which were directed at mission- and operation-critical environments) should serve as a warning sign that security is not a problem IT can solve.
Security and IT leaders often are the most important authorities in protecting an enterprise against threats.
Proctor stated, “Yet business leaders still make daily decisions without consulting with the CIO and CISO that affect the organization’s security.”
The report stated that CIOs and CISOs need to rebalance cybersecurity accountability so it can be shared with enterprise and business leaders.
Gartner suggested that IT security professionals work together with the board of directors and executives to create governance that is accountable for enterprise security decisions.
Proctor stated that “After so many years of heavy security investment, boards are now asking questions and pushing back.”
na/ksk/
#cybersecurity #risk #Delhi
.
