{'fraction_non_alphanumeric': 0.011976047904191617, 'fraction_numerical': 0.0, 'mean_word_length': 5.430769230769231, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
An Analysis of Information Security Governance Structures : the Case of Société Générale Bank

Organizations constantly experience lapses in internal organizational controls thereby affecting the information security of the enterprise. While the problem has been widely acknowledged and sufficient advances made in addressing the issues, yet incidents of gross neglect and failure of information security governance continue to increase. In this paper we analyze the latest casualty of failed security governance, the case of the French Société Générale Bank. Our analysis suggests that a skewed technical orientation in instituting controls was to blame. We propose that a more balanced approach to designing controls needs to be adopted. Such an approach would consider a range of issues at the informal, formal and technical levels.