The goal of a Chief information Security Officer (CISO) providing up-to-date metrics to a bank’s risk committee is to ensure:
Budgeting for cybersecurity increases year over year.
The committee knows how much work is being done.
Business units are responsible for their own mitigation.
The bank is aware of the status of cybersecurity risks
Submit