Incentivizing responsible and secure innovation Principles and guidance for investors

This report proposes an innovative focus on cybersecurity incentives for the investment community. Investors in innovation and technology-driven companies have a responsibility to ensure that cybersecurity is given priority in the early stages of product development. By ensuring cybersecurity from the outset – including features like security-by-design and security-by-default – investors can increase the likelihood of company success in the long term, promote more durable technology and improve overall cyber resilience. This report proposes principles for investors that will raise their internal cybersecurity awareness and offers a complete framework enabling investors to assess the cybersecurity preparedness of their target company.