According to estimates offered by various studies, 70-90% of organisations globally lack sufficient cybersecurity. It is important to realise that this is by no means the sole responsibility of IT departments.
IT workers should of course have the appropriate tools and experience. But the people who need to make the right decisions and take action are primarily the CEO and board members.
Cybersecurity is and has to be the responsibility of the board. However, board members usually do not possess sufficient knowledge or expertise in this area, nor do they even have the proper tools at their disposal. So what can be done about this?