South African executives miss the risk management boat
[Johannesburg, 7 May 2012] -
South African executives seem to think security and risk management is an evolving art that simply takes care of itself. Risk management practices are commonly left to executives with little oversight and no objectives on which their activities can be measured.“With new standards, such as the King III report, companies are well aware that risk management is a precise science that can and should be measured in conjunction with corporate governance, risk and compliance processes,” says Phillip Gerber, MD of Magix Security.“However, many company executives choose not to get involved in risk and security issues, rather leaving it to the chief information security officer (CISO), or another senior colleague, with the hope that all goes well.”
[Full Story.]
|
|
