Cyber security: Identify first what needs to be protected

The approach to implementing enterprise cyber security often is skewed towards focus on control rather than “what are we trying to protect?”

Most cybersecurity projects do not feature active involvement from the company’s board and the business teams. Companies may attain a security certification but end up not focusing on protecting what needs to be protected, which is information and data, says Vittal Raj, an expert on cyber security.