A Leadership Framework to Help Executives Address the Challenge of Cybersecurity Governance

Authors

• Georgia Psaroulis
• Ivano Bongiovanni
• Cate Jerram

Abstract

Cybersecurity governance is increasingly regulated, yet best practice remains fragmented across executive leadership. This article, which draws on our 31 interviews with financial sector leaders, identifies pressing challenges around cybersecurity governance—specifically those connected to tensions around (1) accountability vs. authority, (2) strategic alignment vs. operational execution and (3) clarity vs. ambiguity. To strengthen organizational resilience, we propose a framework for cybersecurity responsibility, ownership and accountability (CROA) and then offer seven recommendations, as well as a self-assessment tool for executives.

Recommended Citation

Psaroulis, Georgia; Bongiovanni, Ivano; and Jerram, Cate (2026) "A Leadership Framework to Help Executives Address the Challenge of Cybersecurity Governance," MIS Quarterly Executive: Vol. 25: Iss. 2, Article 6.
Available at: https://aisel.aisnet.org/misqe/vol25/iss2/6