Boards Must Step Up on Cybersecurity

“Cyber risk has moved from fundamentally a technology issue to being a strategic enterprise risk issue,” BCG’s Paul O’Rourke tells the Australian Financial Review . He believes companies are spending too much money to protect against cyber-attacks in the wrong areas. Companies need strategic knowledge of both cyber and business strategy, he emphasizes. O’Rourke outlines BCG’s evidence-based cyber strategy, which helps boards identify how much and where to allocate resources to mitigate risk.