The most popular and comprehensive Open Source ECM platform
Let us know more
Data Governance: “Tone from the Top” is Critical For Companies to Successfully Deal with Security and Governance
Whose responsibility is data governance in the organization?
While IT may have the lead role in implementation, it turns out that unless there is executive engagement in how governance is to be handled, the priority for dealing with security and governance issues tends to drop and problems inevitably crop up.
The IT Governance Institute asserts that “information security governance is the responsibility of the board of directors and senior executives. It must be an integral and transparent part of enterprise governance and be aligned with the IT governance framework.”
One of the major conclusions reported in the Protiviti 2015 IT Security and Privacy Survey was the importance of buy in and lead provided by company executives. The report notes that the “tone from the top” is often a major factor in the effectiveness of security implementation. Unfortunately the report finds that the amount of direct engagement from executive and board members in organizations actually slipped in 2015.
Terry Hancock, CEO of the Easy i Group, said that “the complexity and criticality of information security and its governance demand that it be elevated to the highest organizational levels. As a critical resource, information must be treated like any other asset essential to the survival and success of the organization.”
George Grachis, Senior Consultant for Maxis360, said that “if there is not adequate separation between IT and the security staff you will have the fox guarding the chicken’s syndrome… I truly believe this is the biggest contribution to poor audit performance and the resulting data breaches. Just look the the latest Verizon data breach investigations reports for more evidence.”
