The Future of Cyber Governance
Something we’ve struggled with for many years is getting value out of our compliance frameworks beyond the obvious certifications we gain from being audited. Some standards, like ISO 27001, or PCI, require implementing controls that manage known cyber risks, but just because a business is compliant, it does not mean they are secure. The disconnect …