Cyber-risk management has increasingly been pushed into the boardroom in the last two years. Governing and overseeing cyber-risks became a group process in which board members implement over time an investment strategy that considers operational, financial, and economic factors in addition to technical aspects, and needs to adapt and evolve according to the company’s cybersecurity posture and the ever-changing threat scenario. However, not all members have solid backgrounds in information technology and cybersecurity, which further complicates matters. The authors developed a management dashboard game leveraging the benefits of the natural user interface (NUI) that fosters an understandable and collaborative environment to provide an education tool about cyber-risks management through proper budget allocation. Our work shows that board members learn about cyber-risk management issues and achieve better results operating collectively than they would do acting individually, regardless of uncertainty. Cyber-risk dashboard design enhanced with exploratory and interactive simulation environment in a collaborative board settings are critical elements to excel in cyber-risk governance and oversight.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Employing Board Cyber-Risk Management Collaborative Game Under Condition of Uncertainty

  • Tony Delvecchio,
  • Sander Zeijlemaker,
  • Giancarlo De Bernardis,
  • Michael Siegel

摘要

Cyber-risk management has increasingly been pushed into the boardroom in the last two years. Governing and overseeing cyber-risks became a group process in which board members implement over time an investment strategy that considers operational, financial, and economic factors in addition to technical aspects, and needs to adapt and evolve according to the company’s cybersecurity posture and the ever-changing threat scenario. However, not all members have solid backgrounds in information technology and cybersecurity, which further complicates matters. The authors developed a management dashboard game leveraging the benefits of the natural user interface (NUI) that fosters an understandable and collaborative environment to provide an education tool about cyber-risks management through proper budget allocation. Our work shows that board members learn about cyber-risk management issues and achieve better results operating collectively than they would do acting individually, regardless of uncertainty. Cyber-risk dashboard design enhanced with exploratory and interactive simulation environment in a collaborative board settings are critical elements to excel in cyber-risk governance and oversight.