Good cyber security starts with boards that ask questions

Not a day seems to go by when there isn't a story in the media about a data breach, commercial espionage or a cyber intrusion where there is 'no evidence that any data was stolen'. The narrative that companies didn't know about a breach or were somehow victims is all too common.

There is also a constant barrage of news (and hype) about the benefits of machine learning, data being the 'new oil' and the potential impact of artificial intelligence and all that comes with it. So, at the same time as squeezing the virtual marrow out of each piece of data, some organisations are not adequately defending the very systems that create, access, store and protect this data.