Why Boards Often Misidentify the Root Issue After a Breach

In Resilience Forward, Raghu Nandakumara argues that CISOs should be judged on how effectively they manage cyber risk within agreed business constraints, not simply on whether a breach occurs.