Governance of cyber security: State of play

With cyber-losses mounting worldwide, the need for effective cybersecurity governance has never been greater. The objective of this paper is to identify what is currently known about this important topic and what remains to be further investigated. We examine both the academic and industry literature and draw upon several recent cases involving malicious external attackers and loss of customers’ financial information, as these characteristics are associated with more significant loss of shareholder wealth.