{"id":31,"date":"2019-03-26T09:00:44","date_gmt":"2019-03-26T01:00:44","guid":{"rendered":"https:\/\/www.praxonomy.com\/blog\/?p=31"},"modified":"2021-07-31T00:44:01","modified_gmt":"2021-07-30T16:44:01","slug":"board-portal-security-safeguarding-the-organisation","status":"publish","type":"post","link":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/","title":{"rendered":"Board Portal Security: Safeguarding the Organisation"},"content":{"rendered":"\n

With the prevalence of online threats and attacks on corporate entities of all kinds and sizes, cybersecurity is an area that cannot be simply relegated to the I.T. departments of organisations to handle. <\/p>\n

Securing the corporation is an essential component of sound business strategy that is developed, refined, and shaped by c-suite leaders and boards of directors. <\/p>\n

Security is not solely an information technology concern, it is a risk management issue for the organisation.<\/p>\n

Placed in this context, these questions arise:<\/p>\n

What does this mean for the Board?<\/em><\/p>\n

What are some of the responsibilities of the Board to ensure the security of the corporation?<\/em><\/p>\n

How does securing board-related activities impact the overall security of the organisation? <\/em><\/p>\n

How might board meeting software or, board portals<\/a>, help?<\/em> <\/span><\/p>\n

Securing the Organisation<\/h2>\n

1.) Legal Obligation to Exercise Fiduciary Duty of Care<\/h3>\n

All members of the board are bound by a legal obligation<\/span><\/a> to act in good faith for the business. The fiduciary duty of care requires that directors exercise competence, diligence, and prudence when supporting \u2013 or furthering \u2013 the organisation’s objectives. The board is also expected to make well-informed decisions that serve the collective benefit of the corporation and its shareholders.<\/p>\n

This fiduciary duty of care applies to cyber-risk strategy and oversight as well.<\/p>\n

Individual directors are increasingly being held accountable<\/span><\/a> for cybersecurity incidents. <\/p>\n

For instance, the Yahoo!<\/span><\/a> and Equifax<\/span><\/a> data breaches led to a number of class-action lawsuits that sought to impose direct liability on directors for, among others, a breach of duty of care specific to the board’s oversight on data security.<\/p>\n

Directors, therefore, cannot afford to overlook the issue of cybersecurity. To do so would not only subject the organisation to vulnerabilities, but they also expose themselves to legal liabilities for their failure to fulfil their duties as board members.<\/p>\n

2.) Comply with Security Regulations<\/h3>\n

The board needs to ensure that it complies with data protection and privacy regulations set by various regulatory bodies so as to prevent the organisation from suffering hefty financial fines that can severely impact the bottom-line.<\/p>\n

To cite an example: in May 2018, the European Union’s General Data Protection Regulation (GDPR)<\/span><\/a> took effect. The GDPR is the most important change in data privacy and regulation for business entities that conduct business in the EU. Organisations can be fined up to 4% of annual global turnover for breaching GDPR or \u20ac20 Million (whichever amount is higher).<\/p>\n

The board needs to stay on top of shifting and evolving security regulations and laws \u2013 as a matter of compliance and good governance.<\/p>\n

3.) Minimise Potential Impact on Tangible and Intangible Assets<\/h3>\n

For some boards, securing the organisation has yet to be deemed as a critical area of concern. But when security doesn’t rank as high in the order of priorities as do other components of strategy (i.e. financial, operational, compliance, etc.), the entire organisation can be compromised. Tangible and intangible assets of the corporation can be severely impacted by security lapses and lead to the erosion of shareholder value. This should be a concern for every board.<\/p>\n

Assets at Risk<\/h2>\n

1.) Finances<\/h3>\n

Security breaches can be so significant as to change the narrative of a company’s performance and valuation. When FedEx<\/span><\/a> was subjected to a cyber-attack in 2017, it cost the company USD $400 million \u2013 impacting its 2018 fiscal forecast by more than USD $1.00 per share from what was initially predicted prior to the attack. <\/p>\n

The financial setbacks were also reflected in a decline in operating income and margin in the first half of the succeeding fiscal year, largely due to the costs of the incident (i.e. recovery and remediation) along with lower volume business.<\/p>\n

2.) Reputation<\/h3>\n

The potential loss of customer and stakeholder trust may be difficult to regain after a data breach. Customer acquisition costs might jump significantly, and retaining existing customers may turn out to be a challenge since faith and goodwill in the company have diminished. <\/p>\n

While that has a direct impact on the business, the indirect consequences are worth noting as well \u2013 such as the inability to attract investors, acquire top-notch talent, and work with qualified partners.<\/p>\n

3.) Intellectual Property and Competitive Advantage<\/h3>\n

An attack on Forrester Research<\/span><\/a> allowed hackers to acquire research content that was available only to its paying customers. Although the hack was contained, it highlights the fact that cybersecurity incidents are not confined to the disruption of production systems.<\/p>\n

In other cases, losing proprietary information and intellectual property can have a crippling effect on an organisation’s competitive advantage especially if trade secrets are compromised and subsequently divulged, shared, or applied.<\/p>\n

Securing the Boardroom<\/h2>\n

It’s important to consider that board members can create cybersecurity risks for the organisation. Therefore, security systems and protocols should be applied at this level. Directors have access to \u2013 and share amongst themselves \u2013 highly-sensitive, valuable, and strategic information. <\/p>\n

It would be no surprise if board members are prime targets for cybercriminals. This is especially true in light of the COVID-19 pandemic.<\/p>\n

Board Security and COVID-19<\/h3>\n

Boards have had to resort to remote meetings and online-based activities in order to execute their governance duties. This has drastically changed the landscape of cyber-risk management for directors, and should, in itself, compel the board to act swiftly on matters of security and risk management. The stakes are higher than ever. <\/p>\n

[NOTE<\/strong>: Our security presentation on remote working delves into the reasons why it should take up room in the board\u2019s agenda. It\u2019s a sobering discussion on the security implications of remote working for any type of organisation. Download it <\/span><\/em>here<\/em><\/a>.<\/span>]<\/em><\/p>\n

In the following section, we take a look at how securing board-related activities, in these unprecedented times, impacts the overall security of organisations. We detail how the use of board portal software can (and should) aid in the thwarting of cybersecurity threats.<\/p>\n

How Board Management Software Helps<\/h3>\n

Board management software, such as Boardlogic<\/a>, help mitigate the security risk around the physical loss of documents, hacking, phishing, and other targeted attacks that seek to obtain and make use of sensitive organisational board information. <\/span><\/a><\/p>\n

Premium board portals invest in security technologies<\/span><\/a> and adhere to rigorous global quality standards precisely because they have identified what’s at stake for the business.<\/p>\n

For organisations that are keen on adopting a cultural mindset that factors in security, the use of a board portal assures stakeholders of the business that the board functions and operates in such a manner that is aligned with the organisation’s overall appetite for risk management.<\/p>\n

Here are some of the features or properties that secure board portals have and how they help protect the organisation:<\/p>\n

a.) Secure-by-Design<\/h4>\n

Security cannot be an afterthought in the development of applications, especially board portals. The most secure solutions integrate security measures, protocols, and considerations throughout the development process \u2013 making board-related information less susceptible to data breaches and cyber-attacks.<\/p>\n

b.) Data Encryption<\/h4>\n

File and data encryption ensures that board information remains private and secure even if it lands in the wrong hands. Secure board portals have robust encryption methodologies to preserve the integrity and confidentiality of data. Files are protected by access controls and users’ unique decryption keys. <\/span><\/p>\n

c.) Custom-Permission (or “Granular”) Settings<\/h4>\n

The most secure board portals are able to apply custom-permission settings for its users. This means that directors are granted appropriate rights to view, edit, or delete documents and\/or files. Board information can also be disseminated only to specific individuals (or groups) depending on their roles, the situation, and existing board structure.<\/p>\n

For example, if a director belongs to the audit committee, he or she can access all audit-related material but may not be able to access the data assigned to members of the compensation committee (unless, of course, they were given specific rights or permissions). Custom-permission settings affords directors the flexibility to control security on a granular level. This addresses issues of confidentiality and of compliance.<\/p>\n

d.) In-app Mail\/Messaging Functionality<\/h4>\n

E-mail is not a closed-loop system. Emails can be easily sent to unintended recipients. One of the highlights of board portals is their in-app mail\/messaging functionality \u2013 which can substitute for email communications between members. It does away with the multitude of risks associated with emailing and “closes the loop” because messaging is confined to members of the board portal, e.g. directors and\/or portal administrators.<\/p>\n

e.) ISO 27001 Certified<\/h4>\n

A cloud-based or SaaS board portal provider that is ISO 27001 certified meets the global security standard for managing the security of the information it holds \u2013 including data assets entrusted to the organisation, i.e. board-related information. <\/p>\n

Boards who utilise board portals that are ISO 27001 certified can rest assured that they are partnering with a provider who has the infrastructure, systems, and policies to ensure the security of their data.<\/p>\n

Conclusion<\/h2>\n

As a final note, the organisation’s commitment to security begins at the top. <\/p>\n

For the business to instil in its workforce the value and importance of securing the organisation as part of its core corporate strategy in an era of risk and uncertainty, leaders must set the tone for it. Boards have an obligation to cybersecurity and this ought to begin in the boardroom. <\/p>\n

Securing board-related information not only exhibits a proactive stance towards cybersecurity issues, but it is also reflective of a thoughtful, prudent approach to effective risk management \u2013 which, ultimately, is a step in the direction of good governance.<\/p>\n","protected":false},"excerpt":{"rendered":"

Board management software, such as board portals, directly address cybersecurity issues – especially as it becomes a risk management concern for boards.<\/p>\n","protected":false},"author":2,"featured_media":136,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1,4,2],"tags":[],"yoast_head":"\nBoard Portal Security: Safeguarding the Organisation - Praxonomy<\/title>\n<meta name=\"description\" content=\"Board portal software directly addresses cybersecurity issues - many of which have become a risk management concern for boards.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Board Portal Security: Safeguarding the Organisation - Praxonomy\" \/>\n<meta property=\"og:description\" content=\"Board portal software directly addresses cybersecurity issues - many of which have become a risk management concern for boards.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/\" \/>\n<meta property=\"og:site_name\" content=\"The Boardlogic Blog | News, Updates, Industry Insights and Best Practices.\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-26T01:00:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-30T16:44:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.praxonomy.com\/blog\/wp-content\/uploads\/2020\/12\/cover-secure-the-board-organisation-v2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1932\" \/>\n\t<meta property=\"og:image:height\" content=\"1230\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Carissa Duenas\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Carissa Duenas\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/\",\"url\":\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/\",\"name\":\"Board Portal Security: Safeguarding the Organisation - Praxonomy\",\"isPartOf\":{\"@id\":\"https:\/\/www.praxonomy.com\/blog\/#website\"},\"datePublished\":\"2019-03-26T01:00:44+00:00\",\"dateModified\":\"2021-07-30T16:44:01+00:00\",\"author\":{\"@id\":\"https:\/\/www.praxonomy.com\/blog\/#\/schema\/person\/c7f1e6afbb97d79f23850d7938b6d748\"},\"description\":\"Board portal software directly addresses cybersecurity issues - many of which have become a risk management concern for boards.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.praxonomy.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Board Portal Security: Safeguarding the Organisation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.praxonomy.com\/blog\/#website\",\"url\":\"https:\/\/www.praxonomy.com\/blog\/\",\"name\":\"The Boardlogic Blog | News, Updates, Industry Insights and Best Practices.\",\"description\":\"The official blog for news, updates, industry insights and best practices from Boardlogic by Formidium \u2014 board meeting management software\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.praxonomy.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.praxonomy.com\/blog\/#\/schema\/person\/c7f1e6afbb97d79f23850d7938b6d748\",\"name\":\"Carissa Duenas\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.praxonomy.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.praxonomy.com\/blog\/wp-content\/uploads\/2020\/12\/carissa-dueanas-150x150.jpg\",\"contentUrl\":\"https:\/\/www.praxonomy.com\/blog\/wp-content\/uploads\/2020\/12\/carissa-dueanas-150x150.jpg\",\"caption\":\"Carissa Duenas\"},\"description\":\"Carissa is a marketing consultant and content contributor for Praxonomy. She began her management consulting career at Accenture and has since worked in a consultant capacity for leading organisations in the technology sector and communications space. She is a contributor to The Globe and Mail, Canada\u2019s leading national daily.\",\"url\":\"https:\/\/www.praxonomy.com\/blog\/author\/carissa\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Board Portal Security: Safeguarding the Organisation - Praxonomy","description":"Board portal software directly addresses cybersecurity issues - many of which have become a risk management concern for boards.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/","og_locale":"en_GB","og_type":"article","og_title":"Board Portal Security: Safeguarding the Organisation - Praxonomy","og_description":"Board portal software directly addresses cybersecurity issues - many of which have become a risk management concern for boards.","og_url":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/","og_site_name":"The Boardlogic Blog | News, Updates, Industry Insights and Best Practices.","article_published_time":"2019-03-26T01:00:44+00:00","article_modified_time":"2021-07-30T16:44:01+00:00","og_image":[{"width":1932,"height":1230,"url":"https:\/\/www.praxonomy.com\/blog\/wp-content\/uploads\/2020\/12\/cover-secure-the-board-organisation-v2.png","type":"image\/png"}],"author":"Carissa Duenas","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Carissa Duenas","Estimated reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/","url":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/","name":"Board Portal Security: Safeguarding the Organisation - Praxonomy","isPartOf":{"@id":"https:\/\/www.praxonomy.com\/blog\/#website"},"datePublished":"2019-03-26T01:00:44+00:00","dateModified":"2021-07-30T16:44:01+00:00","author":{"@id":"https:\/\/www.praxonomy.com\/blog\/#\/schema\/person\/c7f1e6afbb97d79f23850d7938b6d748"},"description":"Board portal software directly addresses cybersecurity issues - many of which have become a risk management concern for boards.","breadcrumb":{"@id":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.praxonomy.com\/blog\/board-portal-security-safeguarding-the-organisation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.praxonomy.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Board Portal Security: Safeguarding the Organisation"}]},{"@type":"WebSite","@id":"https:\/\/www.praxonomy.com\/blog\/#website","url":"https:\/\/www.praxonomy.com\/blog\/","name":"The Boardlogic Blog | News, Updates, Industry Insights and Best Practices.","description":"The official blog for news, updates, industry insights and best practices from Boardlogic by Formidium \u2014 board meeting management software","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.praxonomy.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.praxonomy.com\/blog\/#\/schema\/person\/c7f1e6afbb97d79f23850d7938b6d748","name":"Carissa Duenas","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.praxonomy.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.praxonomy.com\/blog\/wp-content\/uploads\/2020\/12\/carissa-dueanas-150x150.jpg","contentUrl":"https:\/\/www.praxonomy.com\/blog\/wp-content\/uploads\/2020\/12\/carissa-dueanas-150x150.jpg","caption":"Carissa Duenas"},"description":"Carissa is a marketing consultant and content contributor for Praxonomy. She began her management consulting career at Accenture and has since worked in a consultant capacity for leading organisations in the technology sector and communications space. She is a contributor to The Globe and Mail, Canada\u2019s leading national daily.","url":"https:\/\/www.praxonomy.com\/blog\/author\/carissa\/"}]}},"modified_by":"Carissa Duenas","_links":{"self":[{"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/posts\/31"}],"collection":[{"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/comments?post=31"}],"version-history":[{"count":6,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/posts\/31\/revisions"}],"predecessor-version":[{"id":1462,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/posts\/31\/revisions\/1462"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/media\/136"}],"wp:attachment":[{"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/media?parent=31"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/categories?post=31"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.praxonomy.com\/blog\/wp-json\/wp\/v2\/tags?post=31"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}