Cybersecurity for Business: OrganizationWide Strategies to Ensure Cyber Risk Is Not Just an IT Issue

  • 4h 48m
  • Larry Clinton
  • Kogan Page
  • 2022

Balance the benefits of digital transformation with the associated risks with this guide to effectively managing cybersecurity as a strategic business issue.

Important and cost-effective innovations can substantially increase cyber risk and the loss of intellectual property, corporate reputation and consumer confidence. Over the past several years, organizations around the world have increasingly come to appreciate the need to address cybersecurity issues from a business perspective, not just from a technical or risk angle. Cybersecurity for Business builds on a set of principles developed with international leaders from technology, government and the boardroom to lay out a clear roadmap of how to meet goals without creating undue cyber risk.

This essential guide outlines the true nature of modern cyber risk, and how it can be assessed and managed using modern analytical tools to put cybersecurity in business terms. It then describes the roles and responsibilities each part of the organization has in implementing an effective enterprise-wide cyber risk management program, covering critical issues such as incident response, supply chain management and creating a culture of security. Bringing together a range of experts and senior leaders, this edited collection enables leaders and students to understand how to manage digital transformation and cybersecurity from a business perspective.

About the Author

Larry Clinton is President of the Internet Security Alliance. He advises industry and government on cyber policy and regularly appears in the media to provide an expert opinion. He has briefed NATO, the Organization of American States (OAS), G-20 and the US Congress. He has twice been named to the NACD 'Directorship 100' list of the most influential individuals in corporate governance.

In this Book

  • Foreword— Guidance through the Gray
  • Preface
  • Cybersecurity is (Not) an IT Issue
  • Effective Cybersecurity Principles for Boards of Directors
  • Structuring for the Digital Age
  • A Modern Approach to Assessing Cyber Risk
  • The Role of HR Functions in Scaling Cybersecurity and Building Trust
  • Cybersecurity and the Office of the General Counsel
  • Cybersecurity Audit and Compliance Considerations
  • Cyber Supply Chain and Third-Party Risk Management
  • Technical Operations
  • Crisis Management
  • Cybersecurity Considerations During M and A Phases
  • Developing Relationships with the Cybersecurity Team


Rating 4.4 of 17 users Rating 4.4 of 17 users (17)
Rating 4.7 of 266 users Rating 4.7 of 266 users (266)
Rating 4.6 of 30 users Rating 4.6 of 30 users (30)