63%

46%

Boards actively addressing and governing computer and information security

CEOor boardCFOCIO

CISO

40% 52%8% Said their board regularly or occasionally reviewed annual security program

Said they had participated in a test scenario of the plan

CISO role still segregated in their reporting and they are kept out of boardroom level visibility

North America

+50%Europe

+26%Asia

+3%

Industrial

+37%Financial

+35%Energy

+33%IT Cybersecurity

+33%

Increase in Boards’ Focus by Industry

Increase in Boards’ Attention to Cyber Insurance

The Needle Has Moved

The Year ofExecutive Accountability

Who the CiSO Reports To Boards reviewing security budgets

The Difference Between Talk and Action

2012 : 33% 2015 : 63%

50%

41%

23%

2010

2012

2015

Risk Management

*Jody R. Westby, Governance of Cybersecurity: 2015 Report, Georgia Tech Information Security Center, Oct. 2, 2015Download the full report at: www.paloaltonetworks.com/resources/techbriefs/governance-of-cybersecurity.html

Boards’ Focus on Computer andInformation Security

Boards review risk assessment reports

93%Boards hire outside experts to assist on risk issues

53%North America Europe Asia

85% 58% 38%