The Economist Intelligence Unit recently published report provides a good quick read, which Directors and Senior Executives should find useful in thinking about questions they should be asking their CIO about their organisation’ s cyber attack prevention and attack recovery strategies.
The most telling finding in my view is that “The level of preparedness is being held back by a lack of understanding about threats.”
Directors need to understand technology so they can understand the threats and then take a governance oversight of the risk management the business has in place.
Directors who do not understand technology and who are not interested in learning, should think about safer occupations. The rise in activist shareholders could mean more private prosecutions of Directors who fail in their governance oversight role in protecting business from economic damage.