Member

Earlier this year, DSIT conducted a survey which indicated that while 75% of senior managers said that cybersecurity is high-risk, very important and a high priority, the evidence showed that they had not really translated that perception into responsibility in the firm for taking on the risk and managing it. As my noble friend said, the time has come: we must have something which is more than just guidance and becomes a statutory obligation to make proper assessments of companies’ levels, and tolerance, of risk.