It has become a risk expected to be overseen at board level. Multi-factor authentication, patch management, backups and employee awareness are the most effective basic measures, and cyber incidents can also affect financial reporting systems.
Source: ISO/IEC 27001, NIST CSF
Related terms
Information security management system (ISO/IEC 27001)A framework that protects the confidentiality, integrity and availability of information through a risk-based management system and can be certified to ISO/IEC 27001.Data breach notificationThe data controller's obligation to notify the data subject and the Personal Data Protection Board when processed personal data is obtained by others unlawfully.Business continuity planA plan to keep critical activities running at an acceptable level and return to normal within set timeframes after a disruption, disaster or cyber attack.Anti-bribery and corruptionThe set of policies, controls and training designed to prevent the offering or acceptance of undue advantages to or from public officials or private sector employees.Application controlsAutomated or IT-dependent manual controls embedded in a software application that ensure transactions are processed completely, accurately and with authorisation.Compliance auditAn examination of whether an organisation's activities are carried out in accordance with the relevant laws, regulations, contracts or internal rules.
Last updated: November 8, 2026 · This definition is for general information only.