Cyber Risk Is a Governance Issue, Not an IT Issue

When organisations think about cyber security, the focus is often on technology—firewalls, software updates, system monitoring and employee training.