Boards should bear ultimate responsibility for cybersecurity

A new State of the Security Profession survey from The Chartered Institute of Information Security (CIISec) shows that 91 percent of the profession believe ultimate responsibility for cybersecurity lies with the board and not security managers or CISOs (just 31 percent). The survey focused on regulation in the light of a wave of major regulations either recently passed or coming into force -- including the EU AI Act, DORA, NIS2 and the UK’s Data (Use and Access) Bill. The findings show 56 percent say senior management should face consequences such as sanctions, prosecutions, or fines for serious cyber incidents. Only… [Continue Reading]