Guidelines on Corporate Governance for Responding to Cybersecurity Threats in the Digital Age

Abstract

The objectives of this research are to: 1) study the situation of cyber threats to Critical Information Infrastructure (CII) in public health and public utilities; 2) study the enforcement of cybersecurity policies and measures in risk management to raise awareness and monitor cybersecurity threats; and 3) study guidelines on corporate governance for responding to cybersecurity threats and good digital governance in the organization to mitigate risks and prevent future cyber threats. This study is a qualitative research work that relies on the schemes of documentary research and cybersecurity officers to describe cyber threats and how to create a corporate governance for responding to cybersecurity threats. It is found that 1) cyber threats to Critical Information Infrastructure (CII) from both domestic and international sources are becoming increasingly severe, such as in hospitals, electricity and water supply, affecting the security of public health services and public utilities in various countries; 2) many countries are taking of initiatives to formulate policies, practices and prioritize in cyber risk management, including risk assessments to ensure that they are at an acceptable level for the organization; and 3) government agencies have developed applicable guidelines for enterprise operations to reduce friction and risks to a minimum, including legal measures that might not only solve cybersecurity problems but also raise awareness and promote the right to receive information in the Thai state justice process.