The Analysis of Cyber Risk: Vodafone

The Analysis of Cyber Risk: Vodafone 0
Title: The Analysis of Cyber Risk: Vodafone
Assignment Name:
Student Name:
Professor:
Date:

The Analysis of Cyber Risk: Vodafone 1
Executive Summary
This report summarizes the governance and management with context to Vodafone Company.
The suitability for industry- Brazilian Industry sector and suitability for industry in general have
been summarized. An overview has been provided for the different standards and frameworks.
These are COSO, COBIT5, ISO31000, CSGM model and this is streamlined with governance
and management of business IT. A brief description has been provided on the Suitability of
CSGM model for Vodafone Company. Different variables like-shareholders, Cyber security
governance and cyber security management, Cyber environment and critical infrastructure has
been proposed. Recommendation of ERM framework for Vodafone has been given.
Establishment of context with respect to risk assessment, risk response, monitoring and review,
communication and consultation has been given.
A critical review has been presented of different cyber models that are streamlined with business
processes. The policy and process implication for the different cyber models have been provided.
The consistency of cyber models with COSO, ISO3 and COBIT 5 has been given. An overview
of corporate management and governance has also been given, followed by a conclusion.

The Analysis of Cyber Risk: Vodafone 2
Contents
Academic Journal Article Summary................................................................................................4
Governance.............................................................................................................................................4
Management...........................................................................................................................................4
Suitability for Industry.....................................................................................................................5
Brazilian Energy Sector............................................................................................................................5
Suitability for Industry in General............................................................................................................6
Standard and Frameworks...............................................................................................................6
ISO31000:2018 Guidelines written..........................................................................................................7
CSGM Model and ISO 31000....................................................................................................................7
COSO Enterprise Risk Management (ERM) Framework 2017..................................................................8
CSGM Model and COSO ERM Framework...............................................................................................8
COBIT 5- A Business Framework for the Governance and Management of Enterprise IT.......................9
CSGM Model and COBIT 5.......................................................................................................................9
Vodafone........................................................................................................................................10
Suitability of the CSGM Model for Vodafone.........................................................................................10
Stakeholders......................................................................................................................................11
Cyber Security Governance...............................................................................................................11
Cyber Security Management.............................................................................................................12

The Analysis of Cyber Risk: Vodafone 3
Cyber Environment and Critical Infrastructure..................................................................................12
Recommendation of ERM Framework for Vodafone...................................................................13
Establishing the Context........................................................................................................................13
Risk Assessment....................................................................................................................................14
Risk Response........................................................................................................................................14
Monitoring and Review.........................................................................................................................15
Communication and Consultation.........................................................................................................15
References......................................................................................................................................16

The Analysis of Cyber Risk: Vodafone 4
Academic Journal Article Summary
Cyber security is essential for corporate bodies and it is interlinked with decision making.
The companies need to understand the business strategy model along with cyber. The success of
an organization not only lies in its innovation, but also with the strategic importance of cyber
Security. Vodafone is a multinational conglomerate, based out of London. It has centers in
Africa, Asia and Europe. It is a mobile operating company and has been ranked second because
of its high number of the customers.
Governance
According to the recent reports of 2018, there are 535 million customers (Tsoumas and
Gritzalis, 2012). Vodafone has been operating in more than 25 countries and has partnerships
with more than 45 countries. Its global enterprise corporate body arranges IT and
telecommunication services for more than 150 countries. Vodafone is the largest company listed
on the London Stock Exchange and comprises of market capitalization which is approximately
52 billion Euros (Horowitz and Lucero, 2016).
Management
The management team of Vodafone Company is making huge investments in Cyber
Security. The company is confident to strive growth in the business and create differentiation in
the market. Vodafone is acquiring new customers and prioritizing cyber security to a large
extent. Businesses need to focus on the transformation and improvement initiatives. This not
only includes digitalization, but also cyber security. The decision making body is significant for
the individual projects and must not be neglected at large. The companies need to emphasize on

The Analysis of Cyber Risk: Vodafone 5
the robust cyber security issues and this must be streamlined with networks. Another key aspect
which cannot be ignored is security budget.
Suitability for Industry
The energy sector is diverse and complicated. There is existing energy sources which are
using the ERP technology to be more effective and cost-efficient and all the new energy sources
must provide the energy customers with power choices. The innovation impact is bigger than the
choice as it brings changes in the economies of scale. Suppliers of the energy sector will be
required to meet with the different criteria’s to provide right supply to energy equipment owners.
The supplier must have these product characteristics-
1. High Quality
2. Compliance with the engineering specifications
3. Product documentation must be correct and implementing of instructions.
4. History of order requests and rapid availability.
5. Service maintenance record of vital equipment’s and machinery.
Brazilian Energy Sector
Brazilian Energy Sector is based on the renewable energy resources, this account for 80
percent of electricity generation. Brazil is dependent on the hydro generation of power; Energy
sources in Brazil include oil, minerals, hydropower and biofuels. The development of economic
activities, similarly, account energy issues are under the competitive and environmentally
sustainable conditions. Brazil has done its homework and has been frequently mentioned in the
oil production and hydroelectricity power generation. The massive use of wind energy and
interconnected transmission system and especially, the energy renewability and power mix.