Where does the buck stop with security regulation?

91% of the security profession believe ultimate responsibility for security lies with the board.

Only 31% believe ultimate responsibility for security lies with security managers or CISOs.

69% of security professionals think current laws are still not strict enough.

56% say senior management should face consequences such as sanctions, prosecutions, or fines for serious cyber incidents.

Only 34% believe the specific employee who breached policy should be held responsible for serious cyber incidents.