Cybersecurity
Abstract
The beginning of this chapter briefly presents a few examples of scams and hacks that we have all experienced. The AT&T example is taken from a letter the author received explaining that some personal data was illegally obtained and how along with a few recommendations about how customers whose data was put at risk by poor cybersecurity on the part of a major communications provider should proceed to protect themselves. This example seems to suggest that senior executives of this organization are minimally engaged in cybersecurity. In the future and starting at the Board of Director's level, all levels of management including those in the C suite must change. Moreover, according to the CIA, data security has three core principles: Confidentiality, Integrity, and Availability. These three core principles will need new and enhanced skills to ensure the organization address data security as a High Reliability Organization operating at a very high level of performance. Finally, as with all risk and governance efforts, cybersecurity risk mitigation must be aligned and integrated with the Enterprise Risk Management governance, policies, and procedures.