Palo Alto Networks joined Georgia Tech, the Financial Services Roundtable and Forbes, to produce the 2015 Governance of Cybersecurity Report in order to increase the awareness among senior leaders on the importance of cybersecurity risk management and proper investments in the right people, process and technologies needed to prevent cyber threats. The report follows up on three prior studies in 2008, 2010, and 2012 discovering trends and measuring how cyber governance is improving at the boardroom level.

1. 63%
46%
Boards actively addressing and governing computer and information security
CEO
or board
CFOCIO
CISO
40%
52%
8%
Said their board regularly or
occasionally reviewed annual
security program
Said they had participated in
a test scenario of the plan
CISO role still segregated in
their reporting and they are kept
out of boardroom level visibility
North America
+
50%
Europe
+
26%
Asia
+
3%
Industrial
+
37%
Financial
+
35%
Energy
+
33%
IT Cybersecurity
+
33%
Increase in Boards’ Focus by Industry
Increase in Boards’ Attention to Cyber Insurance
The Needle Has Moved
TheYearof
Executive
Accountability
Who the CiSO Reports To Boards reviewing
security budgets
The Difference Between
Talk and Action
2012 : 33%
2015 : 63%
50%
41%
23%
2010
2012
2015
Risk Management
*Jody R. Westby, Governance of Cybersecurity: 2015 Report, Georgia Tech Information Security Center, Oct. 2, 2015
Download the full report at: www.paloaltonetworks.com/resources/techbriefs/governance-of-cybersecurity.html
Boards’ Focus on Computer and
Information Security
Boards review risk
assessment reports
93%
Boards hire outside
experts to assist on
risk issues
53%
North America Europe Asia
85%
58%
38%