Page 16 - demo

Q In your view, what are the most significant gaps in your company’s

ability to manage cyber risk? (select up to two)

Organizational awareness/culture 31%

Keeping technology systems up to date 31%

Vulnerability from third parties/supply chain 24%

Talent/expertise 22%

Monitoring and reporting of cyber threats (e.g., dashboard) 21%

Internal “people” risk 20%

Readiness and response/containment of breaches 19%

No significant gaps 4%

Other 1%

Multiple responses allowed

Despite the intensifying focus on cyber security, the focused on the company’s “adjacencies,” which can
cyber risk landscape remains fluid and opaque, even serve as entry points for hackers. The board should
as expectations rise for more engaged oversight. As help elevate the company’s cyber risk mind-set to an
the cyber landscape evolves, board oversight—and the enterprise level, encompassing key business leaders, and
nature of the conversation—must continue to evolve. help ensure that cyber risk is managed as a business or
Discussions are shifting from prevention to an emphasis enterprise risk—not simply an IT risk.
on detection and containment and are increasingly

© 2017 KPMG Central Services, a Belgian Economic Interest Grouping (“ESV/GIE”) and a member firm of the KPMG network of independent member firms affiliated with KPMG International
Cooperative (“KPMG International”), a Swiss entity. All rights reserved. Printed in Belgium.