Roles and Responsibilities in CISR Management

Report - September 2019

We surveyed 25 financial institutions to establish where cyber risk management responsibilities sit across the three lines of defence, and to identify those areas where there is confusion.

Participants were asked to tell us where responsibility currently sits for 24 specific risk management activities. We wanted to see how responsibilities and roles are currently distributed and then work together to develop a model that could reduce confusion and add clarity. 

Our full report on Roles and Responsibilities in Cyber and Information Security Risk Management 2019 is available to all ORX Cyber subscribers.

Contacts: