Cybersecurity Governance: How can we measure it?

Abstract

Any Corporate Governance aspect involves numerous steps when it comes to determining how efficient and effective an organization's governance implementations are. Cybersecurity Governance is not much different in this regard. As Cybersecurity Governance is a relatively new and very important concept, the idea of assessing the efficacy of Cybersecurity and Cybersecurity Governance implementation is still highly debated and researched. In this article, we discuss adaptations to a Cybersecurity Governance Maturity Model and we will also discuss a second and important aspect related to the Cybersecurity Governance Maturity assessment; reporting. We will discuss how the maturity model can be used to create descriptive and understandable reports for the various roles within the Board of Directors and Executive Management.