Good question. Are we dealing with a strategy or is this a structural issue?
It should be an obvious observation that the inclusion of cybersecurity risk management is part of the overall enterprise risk management vision. In order to build up and maintain an effective cybersecurity risk approach, employees need to be involved, making a cybersecurity risk culture sustainable.
As it becomes part of the workforce dna, more effective risk based decision making will be made possible.
So in the end such a cybersecurity risk vision translates into strategy structure and operations.
Ask TrustMatters about our Cybersecurity risk culture training program
We collect your requests for information here.