Africa: implementation of independent IT security among firms| ��ƽ��

What is your organization’s approach to implementing independent information security oversight?

Characteristic	Share of respondents
-	-
-	-
-	-
-	-

Download

Source

Show detailed source information?

Already a member?

Source

Release date

September 2022

More information

Region

Africa

Survey time period

September 2022

Number of respondents

300 respondents from business sectors

Supplementary notes

Respondents were from the following business sectors: financial services, government/ public sector, manufacturing, energy and natural resources, Information & communication technology (ICT), and others.

Possible answers: "We have a fully independent cyber and information security function reporting directly to the organizational leadership. Risk management and internal audit provide independent oversight."; "Information security is incorporated into IT security and reports to the CIO or equivalent. Risk management and/or internal audit provide(s) independent oversight"; "Information security is incorporated into IT security and reports to the CIO or equivalent. Risk management and/or internal audit provide(s) independent oversight"; "We have no formal information security function, and IT security efforts are fully managed out of IT with little to no independent oversight"; "Other formal structures are in place."

Citation formats

In 2022, a survey conducted found that around ** percent of the businesses across Africa reported that their organizations had included the information security function within the broader scope of IT security. Moreover, ** percent of respondents stated that the firm's cyber and information security function operated independently and reported directly to the leadership team, while their risk management and internal audit teams provided unbiased supervision.