Cybersecurity is an enterprise governance issue, not simply an IT problem.
Boards and executives should understand critical services, material cyber risks, identity controls, backup and recovery, incident readiness, third-party exposure and the evidence behind management assurance. Useful cyber reporting connects technical controls to business consequence and recovery capability.
Control 21 perspective
The practical question is not whether the concept is fashionable, but whether it improves decisions, delivery or operations. Control 21 approaches the topic through governance, implementation and measurable operating outcomes.
Next step
What should your organisation do next?
Describe the problem to AVA or speak directly with Control 21 about a scoped engagement.