Overall, the responsibility to oversee cyber-risk management in modern organisations lies
with Boards of Directors. However, evidence suggests that boards are not nearly as …

Today, more than ever, the demands posed by issues of cybersecurity clash with both the
need for innovation and the clamor for productivity. Increasingly, cybersecurity risk includes …

Purpose The purpose of this paper is to define cybersecurity and cybersecurity governance
in simplified terms–to explain to the boards of directors and executive management their …

Given the financial consequences of security breaches, security risk management has
gained more attention in board rooms and garnered more involvement from top …

Frequent cyber-attacks on organizations in the last decade have caught the attention of
practitioners and governance bodies, who have called for boards to take a more active role …

Purpose–Information security is becoming increasingly more important as organisations are
endangered by a variety of threats from both its internal and external environments. Many …

Managers who oversee cybersecurity policies commonly rely on managerial
encouragement (eg, rewards) and employee characteristics (eg, attitude) to drive compliant …

Cybersecurity is a growing problem associated with everything an individual or an
organization does that is facilitated by the Internet. It is a multi-facetted program that can be …

Purpose This paper aims to review the information security governance (ISG) literature and
emphasises the tensions that exist at the intersection of the rapidly changing business …

The increase in cybersecurity threats and the challenges for organisations to protect their
information technology assets has made adherence to organisational security control …