The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks

CHAPTER 30: EMBEDDED

At this stage, you should have developed your base framework and extended it as your specific needs demand, drawing on best-practice standards and frameworks where appropriate. Now, you should think about how you can align your cyber resilience objectives and activities with your wider business objectives, maximising the effectiveness and sustainability of your security programme.

IT governance – an element of corporate governance aimed at improving the overall management of IT and deriving improved value from investment in information and technology – plays a vital role in aligning your cyber security and resilience activities with your wider business objectives. IT governance frameworks can help you achieve this in an effective ...