Corporate Governance & Ethics Case Study Report based on cyber resilience policy 2017

REPORT 2
Executive Summary
A rising threat which the company is facing relates to the cyber attacks which are the new kind
of theft and is the result of the digital era. With the companies becoming increasingly reliant
upon data being stored on computer systems and work being done on connected networks, the
cyber criminals have been presented with a golden opportunity to not only steal the finances of a
company, but also to steal their confidential information and misuse it, as it best suits them. This
has presented the company with the need to adopt a cyber resilience policy, which after being
adopted by the board, would be applicable for the entire company.
Through this report, the very issue of cyber security has been highlighted with the case studies
where the companies and the government was put in an unwanted situation and the personal and
confidential information of the general public was leaked by the hackers. Such incidents have led
to certain best practices being adopted by the company, which this company also needs to adopt,
whilst coming up with the cyber resilience policy. To help the board in drafting this policy, the
best practices have been covered here, along with the recommendations, which would help the
board in this regard.

REPORT 3
Contents
Introduction......................................................................................................................................4
Why Cyber Security?.......................................................................................................................4
Integration of Cyber Security and Resilience Protocols..................................................................5
Examples of Best Practices..............................................................................................................7
Recommendations for initiating Cyber Resilience Policy.............................................................10
Recommendation 1....................................................................................................................10
Recommendation 2....................................................................................................................10
Recommendation 3....................................................................................................................11
Recommendation 4....................................................................................................................11
Recommendation 5....................................................................................................................11
Conclusion.....................................................................................................................................11
References......................................................................................................................................13

REPORT 4
Introduction
A key strategic challenge which is being faced by the leaders across the nations, irrespective of
the sectors or industries in which they operate, and one which needs to be surmounted for taking
advantage of the vast technological advancements in the networked technology relates to
countering of the cyber risks. In the recent times, the understanding of how a secure and resilient
digital network can be built has significantly been expanded. Though, the pace of the ones
making misuse of the technology and the ones who pose a threat to the cyber security of an entity
is rising at a faster pace. This has resulted in the technological risks being topping the charts and
the innovations proving slow in dealing with them effectively (World Economic Forum, 2017).
The board of any company has the duty to identify and mitigate the risks which the company
faces and the cyber risk is no exception to this. Hence, the boards of the companies have to take
the required steps towards countering the cyber risks (Willson and Dalziel, 2015). And the very
purpose of presenting this report is to educate the board on the issues surrounding cyber security
and the manner in which the cyber security and resilience protocols can be integrated in the
company for ensuring the survival of the company and improving upon the business
performance. Some recommendations have been also drawn in this report regarding the manner
in which the company can initiate the cyber resilience policy.
Why Cyber Security?
Cyber security, in the simplest of terms, refers to the computer systems being protected from any
and all kinds of damage or theft of information, software or hardware, apart from the