Let’s play a game! Two truths and a lie about Cybersecurity Governance.
In support of Cybersecurity Awareness Month, we are examining factual and fictional statements about common cybersecurity topics. The focus of this article is on Cybersecurity Governance.
Can you guess which of the three statements below is a lie and which two are true?
- The Board of Directors’ awareness of organizational cybersecurity risks and maturity levels is essential to ensuring proper direction and decision-making.
- Cybersecurity typically operates as a second line of defense function for an organization.
- Organizational cyber risk tolerance levels are best determined by the chief Information security officer of the organization.
Watch the full video below as Carl Kriebel, Shareholder of Cybersecurity Consulting Services, reveals which statements are factual and which are not. He also sheds light on important considerations regarding Cybersecurity Governance.
This article is part of a series highlighting factual and fictional statements about common cybersecurity topics. Additional articles include:
- Two Truths and a Lie About Cybersecurity: Cyber Insurance
- Two Truths and a Lie About Cybersecurity: Purple Teaming
- Cybersecurity Awareness Month is Over…Now What?
About Cybersecurity Awareness Month
Since 2004, the United States and Congress have recognized October as Cybersecurity Awareness Month to raise awareness about the importance of cybersecurity in the public and private sectors and tribal communities. With a focus on securing our world, Cybersecurity Awareness Month recognizes the importance of taking daily action to reduce risks when online and connected to devices.
Related Resources
- CISA Cybersecurity Awareness Month Resource Center
- CISA Cybersecurity Awareness Month 2024 Toolkit
- Schneider Downs Cybersecurity Resource Library
About Schneider Downs Cybersecurity
We help your organization be prepared. The Schneider Downs cybersecurity practice consists of experts offering a comprehensive set of information technology security services, including Penetration Testing, Intrusion Prevention/Detection Review, Ransomware Security, Vulnerability Assessments, and a robust Digital Forensics and Incident Response Team.
Learn more at www.schneiderdowns.com/cybersecurity or contact us at [email protected].