Governing security
Senior management, CISO, DPO, security policy, EBIOS RM risk analysis, ISO 27001, budget, KPIs, staff awareness and cyber insurance: steering security.
Presented byBelinda
10 min readUpdated on 2 October 2026What you will learn
- Understand what NIS2, DORA and the GDPR expect from senior management
- Tell the CISO and DPO roles apart, and place them at the right level
- Build a security policy from a risk analysis (EBIOS Risk Manager, ISO/IEC 27005)
- Know what ISO/IEC 27001:2022, ANSSI’s hygiene guide and NIST CSF 2.0 bring
- Choose a budget and indicators that are useful to the executive committee
- Organise staff awareness and prepare for cyber insurance
Free chapter with your account
Chapter 1 is free to read. Chapters 2 to 21, like the Junior, Senior and Expert levels of the Cyber Quiz, are free too: all you need is a free KrakenShield account with a confirmed email address.
Checking your access…
This content is temporarily unavailable. Please try again in a moment.
