ABSTRACT

This chapter explains: placing corporate governance in context, harnessing appropriate technology, organizational commitment to corporate governance, corporate governance revisited. Kendrick suggests that corporate governance represents a business strategy based upon transparent decision making, the establishment of lines of accountability and responsibility and the adoption of sound risk management strategies, including information security. The Generic Cyber Security Management Model (GCSMM) allows senior management to improve and refine the linkage between a company's cyber security strategy and the company's ability to attract and maintain cyber security specialists. Proteus is a risk, compliance and governance tool, which is integrated within an organization's operating system, and which can be set up and implemented within one to three days and which links into every operational activity of the organization. It is supported by a network of sensors that detect incidents and records the level of threat activity. By identifying threats in real time, managers are well placed to prevent further attacks in real time.