CISOs Must Engage the Board About Information Security

CIO — Your organization will come under attack. It’s not a matter of “if.” It’s a matter of “when.” And security is no longer simply an operational concern. As technology has become the central component of nearly all business processes, security has become a business concern. As a result, information security should sit firmly on the boardroom agenda.

“If the worst were to happen, could we honestly tell our customers, partners or regulators that we’ve done everything that was expected of us, especially in the face of some fairly hefty fines that could be levied by regulators,” asks Steve Durbin, global vice president of the Information Security Forum, a nonprofit association that researches and analyzes security and risk management issues on behalf of its members, many of whom are counted among the Fortune Global 500 and Fortune Global 1000.

SOURCE: cio.com