Cybersecurity Leadership

At its heart, governance should be about security practices and focus on risk mitigation as a security concept rather than as a compliance driver. Compliance will be a by-product of good security practices that can be guided by security governance frameworks.

How can IT teams balance the agility of the cloud with the control required to run a modern enterprise?

Existing risk management practices are no longer sufficient. Simple tinkering with risk and control assessments and promoting the 3 lines of defence model will not deliver the resilience outcomes that we need to prevent the failures and blow-ups of the past.