Summary

Governance is not a small feat and to efficiently govern your cybersecurity program, you are going to need the right support and resources to make it a success. It is important that you are aware this is a program that will not be set up overnight. It will take time and dedication with support from your executive leadership team and the broader business functions. And the reality is, this program is required whether you like it or not. Without it, the liability for a major cybersecurity incident will fall directly on the CISO or cybersecurity leader in charge. One of the primary drivers for this program is to bring transparency to the executive leadership team and board of directors so that accountability occurs at the top, as it should.

To begin the chapter, we reviewed the importance of program governance and how governance encompasses risk, compliance, and regulation, which, in turn, overlooks the broader cybersecurity program. We also reviewed some real-life examples...