When it comes to information security, there are many factors you need to consider. Rather than looking at your various systems in isolation, it’s important to take an enterprise-wide view. You need to identify all your physical and cyber assets, your intranet and website(s), and not overlooking connected IoT devices. In fact, your network extends beyond the organisation and includes extranets and any bespoke systems you may have set up with specific suppliers, customers or other business partners. Information security involves the confidentiality, integrity and availability of data. It is a critical component of your IT governance. Information and information technology together are key strategic enablers for any business. Keeping them secure and well managed has to be a top priority for any board of directors.