Implementation of independent information security among firms in Africa 2022

Respondents were from the following business sectors: financial services, government/ public sector, manufacturing, energy and natural resources, Information & communication technology (ICT), and others.

Possible answers: "We have a fully independent cyber and information security function reporting directly to the organizational leadership. Risk management and internal audit provide independent oversight."; "Information security is incorporated into IT security and reports to the CIO or equivalent. Risk management and/or internal audit provide(s) independent oversight"; "Information security is incorporated into IT security and reports to the CIO or equivalent. Risk management and/or internal audit provide(s) independent oversight"; "We have no formal information security function, and IT security efforts are fully managed out of IT with little to no independent oversight"; "Other formal structures are in place."