The ultimate responsibility in the case of a data breach rests with the CEO. The role of the CEO is to ensure that cyber-security issues are adequately addressed within their organisation by ensuring adequate commitment of time and finances to support the process. The need for this important step was emphasised in a recent report entitled Risk and Responsibility in a Hyperconnected World Pathways to Global Cyber Resilience issued by the World Economic forum last month. Eighty per cent or more of currently successful attacks exploit weakness that can be avoided by following simple best practice.”]
Source: http://securityaffairs.co/wordpress/6929/hacking/are-your-business-operations-secure.html