“How can one identify the true owner of a cyber risk?

When everyone is responsible, no one is responsible. This is an undisputed fact.

To the best of my knowledge, organizations often rely on frameworks such as RACI matrices (Responsible, Accountable, Consulted, Informed) to formally assign ownership.

From another perspective, however, the “true owner” of a cyber threat is its creator. And here is where the truth may reside.

Whether it is hackers, insiders, corporate culture, a lack of CISO expertise, disinformation, or perhaps the very silos you have built. And wait. What about your CIO, your CEO, your Board? Think of them as the first line of cyber threats.

I can. I am a scientist, a researcher. I search for what I cannot even imagine at first. Then - it is up to you to decide where to look.”