MIT Sloan Management Review Article on The Anatomy of Effective KPIs

Cybersecurity can no longer be the concern of just the IT department. Within organizations, it needs to be everyone’s business — including the board’s.

Today, more than ever, the demands posed by issues of cybersecurity clash with both the need for innovation and the clamor for productivity. Increasingly, cybersecurity risk includes not only the risk of a network data breach but also the risk of the entire enterprise being undermined via business activities that rely on open digital connectivity and accessibility. As a result, learning how to deal with cybersecurity risk is of critical importance to an enterprise, and it must therefore be addressed strategically from the very top. Cybersecurity management can no longer be a concern delegated to the information technology (IT) department. It needs to be everyone’s business — including the board’s.

About the Author

Michael Schrage is a research fellow at the MIT Sloan School of Management’s Initiative on the Digital Economy, where he does research and advisory work on how digital media transforms agency, human capital, and innovation. He may be reached at schrage@mit.edu.

Learn more about MIT SMR.