Infosec a key part of business risk, says Deloitte

Information security is one of the fundamental aspects of business risk, according to Mike Maddison, partner at Deloitte.

“This is a strategic area of focus for Deloitte because information security is important to the world’s largest organisations,” he told the ISSA London 2013 European Conference.

Download this free guide

How to improve your cyber security with security analytics

Download this e-guide to read how many firms are looking to security analytics to keep abreast of the ever-evolving world of cyber threats. With traditional approaches to cyber security proving less effective against increasingly sophisticated and automated cyber-attacks, security analytics may well be your knight in shining armour.

Start Download

• Corporate E-mail Address:

  You forgot to provide an Email Address.

  This email address doesn’t appear to be valid.

  This email address is already registered. Please login.

  You have exceeded the maximum character limit.

  Please provide a Corporate E-mail Address.

• • I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.

  Please check the box if you want to proceed.

• • I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.

  Please check the box if you want to proceed.

By submitting my Email address I confirm that I have read and accepted the Terms of Use and Declaration of Consent.

Maddison said it was no longer true that business boards do not understand cyber threats as a business risk. “The board does now ‘get it’ in our experience,” he said.

This is evidenced by the number of times information security cropped up as a topic of discussion at the 2013 World Economic Forum summit in Davos Switzerland, he said.

According to Maddison, there is a growing understanding that there are two types of organisation when it comes to cyber security: those that know they have been breached, and those that do not.

The challenge now, he said, is for the information security industry to advise businesses on how best to respond to that risk and adapt to constantly evolving cyber threats.

Image: iStockphoto/Thinkstock