A Second Order Cybernetic Model for Governance of Cyber Security in Enterprises

Cybersecurity has become a top concern and important topic in both public and private companies, financial institutions, regulators and law enforcement due to ever increasing cyber risks. However, the governance of cybersecurity remains a challenge. The current approaches to the governance of cybersecurity in enterprises fail to consider its multidisciplinary nature and complexity. In this paper, we explore the governance aspects of cybersecurity in enterprises that are multidisciplinary in nature and propose a cybernetic model for continuous and good governance of cybersecurity leveraging the multidisciplinary collaboration, conversational, goal directedness and dynamic feedback control aspects of cybernetics. The implementation of the cybernetic model in a big telecom enterprise improved its systems and processes of cybersecurity governance.