Information security governance: pending legal responsibilities of non-executive boards

Laura Georg ()
Additional contact information
Laura Georg: Norwegian University of Science and Technology NTNU

Journal of Management & Governance, 2017, vol. 21, issue 4, No 1, 793-814

Abstract: Abstract The study shows that a structural conflict of interest in non-executive boards exists due to missing corporate governance structures and a lack of awareness for legal issues with regard to information security risks. Non-executive boards receive information on strategic security threats as a part of their oversight function to fulfill investor interest in transparency. At the same time, they act as representatives of company stakeholders and have an interest to counteract to information security risks based on the stakeholder’s risk disposition. If not properly structured by corporate governance rules, these different interests may lead to regulatory aberrations on non-executive board level. The study analyses a Deutsche Telekom AG case where non-executive board members, employees, and journalists fell victim to a spying scandal subject to the German telecommunications secrecy law in 2005–2006. The analysis demonstrates how the handling of information security on non-executive board level bears governance risks as well as legal risks that are insufficiently addressed in corporate governance research. The paper contributes to avoid a reproduction of events in the future, by suggesting the principle of a segregation of duties on non-executive boards as well as providing an overview of relevant legislative requirements that clarify tasks of non-executive board members with regard to information security. The study therefore helps protecting corporations and their stakeholders from similar consequences of missing corporate security governance.

Keywords: Information security governance; Operational risk management; Non-executive board research; Information security legal obligations; Conflict of interest (search for similar items in EconPapers)
Date: 2017
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (2)

Downloads: (external link)
http://link.springer.com/10.1007/s10997-016-9358-0 Abstract (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:kap:jmgtgv:v:21:y:2017:i:4:d:10.1007_s10997-016-9358-0

Ordering information: This journal article can be ordered from
http://www.springer. ... 29/journal/10997/PS2

DOI: 10.1007/s10997-016-9358-0

Access Statistics for this article

Journal of Management & Governance is currently edited by Lino Cinquini

More articles in Journal of Management & Governance from Springer, Accademia Italiana di Economia Aziendale (AIDEA) Contact information at EDIRC.
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().