Cybersecurity News and Headlines

Enterprise Risk Management and Cybersecurity: Closing the Gap in Risk Governance

APQC’s new research highlights the critical gap between cybersecurity and enterprise risk management, revealing that only 41 % of organizations have integrated cyber risk into their ERM processes. The study introduces the Cyber‑ERM Integration Index, which measures governance alignment, risk quantification, workflow embedding, and third‑party coverage. Findings show that weak integration hampers the ability to prioritize cyber threats alongside financial and operational risks, while mature integration drives resilience and faster decision‑making. Leaders are urged to embed cyber risk into board‑level discussions and core business workflows.