Crana Consulting

Our mission is to build the organisational muscle memory necessary for Board-of-Directors to be able to effectively govern their company through the ever-evolving threat of cybercrime. Cyber security is not the exclusive realm of IT and the office of the CIO, or appointed CISO. Effective corporate governance requires Board Members and the Executive to be actively engaged in the protection of their business, All executives need to be knowledgeable on the real threats from cyberattack, understand their personal role in both the preventative planning but also the response to a cyberattack. The Board needs to be able to come to consensus on moral and ethical decisions related to cyber situations, agree on what company assets are business critical to protect, establish trust in the people charged with protecting the company, have the right metrics and governance framework. The outcome is to create a top-down culture where cyber security is embedded into day-to-day operations, following the footsteps of other cultural change such as work health & safety zero injury mindset.