16Cyber Risk from an IT Leader’s Point of View
Michael Castro, CDir, ASC, MBA
CEO and Founder of RiskAware Inc.
“There are only two types of companies: those that have been hacked and those that will be.”
—Robert Mueller, FBI Director (2001–2013)
It is not easy being a chief information officer (CIO) these days, let alone a board member. For the CIO, having to shoulder the responsibility for cybersecurity can be challenging, with an operational outcome of effort and risk that combines with the threat outlay. Many senior executives now realize that cybersecurity and the risk for security do not lie solely with the Information Technology (IT) team. It is, in fact, an organizational problem.
Indeed, dealing with cybersecurity is not an operational task the chief executive officer (CEO) or the senior management team needs to deal with at the operational level. However, the members of the board require oversight, and for that, the board needs to understand all the risks, including cybersecurity risks. According to the National Association of Corporate Directors, 31 percent of board members surveyed are dissatisfied with the quality of cybersecurity information provided by management.1 Leadership needs to be prepared.
In the News
News coverage of cybersecurity breaches is everywhere. Traditional news feeds, social media, and blogs all report on negative impacts on organizations regarding breaches. In 2018, consumers saw one of the most significant breaches in history. Starwood ...
Get The Handbook of Board Governance, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
