Intelligent CISO Issue 46 | Page 23

49 % of respondents claim that cyberrisks are still being treated as an IT problem rather than a business risk .
We need to talk about risk in a way that frames cybersecurity as a fundamental driver of business growth . www . intelligentciso . com
infographic hard enough ( 26 %) or doesn ’ t want to understand ( 20 %).

49 % of respondents claim that cyberrisks are still being treated as an IT problem rather than a business risk .

There ’ s also disagreement between IT and business leaders over who ’ s ultimately responsible for managing and mitigating risk . IT leaders are nearly twice as likely as business leaders to point to IT teams and the CISO .
A total of 49 % of respondents claim that cyber-risks are still being treated as an IT problem rather than a business risk .
This friction is causing potentially serious issues : 52 % of respondents agree that their organisation ’ s attitude to cyber-risk is inconsistent and varies from month to month .
However , 31 % of respondents believe cybersecurity is the biggest business risk today and 66 % claim it has the highest cost impact of any business risk – a seemingly conflicting opinion given the overall willingness to compromise on security . There are three main ways respondents believe the C-suite will sit up and take notice of cyber-risk :
• 62 % think it would take a breach of their organisation
• 62 % think it would help if they could better report on and more easily explain the business risk of cyberthreats
• 61 % say it would make an impact if customers start demanding more sophisticated security credentials u

We need to talk about risk in a way that frames cybersecurity as a fundamental driver of business growth . www . intelligentciso . com

23