Boards across most business sectors, are mostly made up of people drawn from a wider educational background, and whose business experience is primarily in commercial operations or sales.

Other than in technology businesses, few if any members of the senior management team have a direct role or interest in IT or in IT’s role in business operations. Yet
information technology is fundamental to business performance today. Information and information technology has to be appropriately protected: confidentiality and integrity must be preserved, while ensuring that information and technology resources are available to those who need them to perform their roles. IT and information security requires investment – of money, time and resources – by the business. And decisions about where and how to invest business resources are made by top management, people with little awareness of and less interest in IT.

This little book offers you knowledge and information that will better enable you to successfully sell information security to the Board.